{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3bede41-f180-4f5b-98aa-5eb98561427d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3bede41-f180-4f5b-98aa-5eb98561427d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3bede41-f180-4f5b-98aa-5eb98561427d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3bede41-f180-4f5b-98aa-5eb98561427d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3bede41-f180-4f5b-98aa-5eb98561427d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33358","PortSpecifier":{"PortValue":33358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33358","PortSpecifier":{"PortValue":33358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609616,"nanos":338623814},"http":{"id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","method":"POST","headers":{":authority":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ray2QjzKHW3Rhbyu_MywpjdI6NI1y2NdF1sHa3SMCzeqBsahHdFwW5SEoTHF"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ray2QjzKHW3Rhbyu_MywpjdI6NI1y2NdF1sHa3SMCzeqBsahHdFwW5SEoTHF\"}"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"27219d2a-bcdb-4532-a9c3-44eb358e5087","keyName":"e2e-sub-iso-eaecca","subscription":"e2e-shared-sub-db08b6","tenant":"e2e-shared-a-9fdb31","userId":"27219d2a-bcdb-4532-a9c3-44eb358e5087","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9fdb31/sub-test-model-9fdb31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9fdb31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-db08b6"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cc19dd9-8e41-48e9-8b24-15439ca6a0d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37664","PortSpecifier":{"PortValue":37664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-4de716.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37664","PortSpecifier":{"PortValue":37664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609616,"nanos":367826407},"http":{"id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","method":"POST","headers":{":authority":"e2e-shared-b-4de716.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19kuc0tNULG0UQwMi_Z8DQ5S8rdEly1ahTDiWbdB3tUOr3ViambZSBh2MW07g"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4de716.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19kuc0tNULG0UQwMi_Z8DQ5S8rdEly1ahTDiWbdB3tUOr3ViambZSBh2MW07g\"}"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4de716.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9763c900-0e5c-40b6-9885-35c9bd404c27","keyName":"e2e-sub-iso-2bcd2b","subscription":"e2e-shared-sub-db08b6","tenant":"e2e-shared-b-4de716","userId":"9763c900-0e5c-40b6-9885-35c9bd404c27","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4de716/sub-test-model-4de716\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4de716/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-db08b6"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:53:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"912acbb4-407a-4a22-b7d2-d3df20b251f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca6d2d693c37e9d9da4d45ea51e1fb65a5ad49a490d44ddaede4a771e30323b0"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d708b84a1c52ec89ba342ee8748a1461bec3529b345d62c2d38b8690feac708c"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82b9bcc707d57282db60cc5129a8efd9d20c5b251f99c0ee4bcdebb0b187a079"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eee0e7ecb91ec019e91e4a42c4a5ee0b0865cd68bd6b8bb0c8cf8de2c3b3da3a"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/190642559d7e9304955bb402143004dfc3e3d88e8b7aca319eb7150d18259d2a"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85e8a09e801f0b40b9b3ae7e3f063042c2177bcd786dec3428f5e0bc0b8de4b7"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fee1ff9f7677d8457055637e1635050a1433f254a9821b93c46d515dda7c0b9"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3898825aaa39d84abe5fa03bde6ca06d6d2b1cec58a44d9eab633fbd92bb52b9"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ca69cecfd50b478ac00946f851ea989b21283bc74edbca26c771493afcedaca"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b6fc9158ce77478b1e87c775f401cfe20c3c824f607c297fc221fda8a4e0b53"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4"}
{"level":"info","ts":"2026-07-21T04:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5"}
{"level":"info","ts":"2026-07-21T04:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a43a2eec628f855bae6e6aa1f45d17cc331b34a11c51dfc282da0d343493771f"}
{"level":"info","ts":"2026-07-21T04:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b1ca9f0c7470f93c500ce1cd05520631627216ced3aec8cce0cdcdc2711a039"}
{"level":"info","ts":"2026-07-21T04:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de96665bba1160d8256ea65252751ecb554b5a8c26a34cf2041b79a9e5c12aa5"}
{"level":"info","ts":"2026-07-21T04:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25c6d9b326e189503c6b4d09b5a79fb7304ae17c933c145ad4de23a35a29aa67"}
{"level":"info","ts":"2026-07-21T04:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a76a175c73d7e05ebf33321af6760592191b4067c8b79f5ca2e78786d2e3f6fa"}
{"level":"info","ts":"2026-07-21T04:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75a8cb52d314370838e791eeb2d9b668f00b54aa34ec6b33ddf1cf1082c27e92"}
{"level":"info","ts":"2026-07-21T04:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3631fb16a6d1013f6aed0662cf112e1b0f3375aae6215b922a21a89d86a49b32"}
{"level":"info","ts":"2026-07-21T04:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e834e08be455ff88dba4b585f72128eb7910fce807f5cc626e602ab80dd187c"}
{"level":"info","ts":"2026-07-21T04:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc2ac806844e4e46b69c515826a21eaaed0c889d6db6fb62fff7654f565e19c8"}
{"level":"info","ts":"2026-07-21T04:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11f80afd44291d72c18419906dab113296860e688c71488ad5a0c6cf2fb13309"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048"}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fd6f266f2d95978f63025a1d1242339f2da17cf94a1d8f116ad41d7948caa64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fd6f266f2d95978f63025a1d1242339f2da17cf94a1d8f116ad41d7948caa64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fd6f266f2d95978f63025a1d1242339f2da17cf94a1d8f116ad41d7948caa64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fd6f266f2d95978f63025a1d1242339f2da17cf94a1d8f116ad41d7948caa64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fd6f266f2d95978f63025a1d1242339f2da17cf94a1d8f116ad41d7948caa64"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fd6f266f2d95978f63025a1d1242339f2da17cf94a1d8f116ad41d7948caa64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fd6f266f2d95978f63025a1d1242339f2da17cf94a1d8f116ad41d7948caa64"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fd6f266f2d95978f63025a1d1242339f2da17cf94a1d8f116ad41d7948caa64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fd6f266f2d95978f63025a1d1242339f2da17cf94a1d8f116ad41d7948caa64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fd6f266f2d95978f63025a1d1242339f2da17cf94a1d8f116ad41d7948caa64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fd6f266f2d95978f63025a1d1242339f2da17cf94a1d8f116ad41d7948caa64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fd6f266f2d95978f63025a1d1242339f2da17cf94a1d8f116ad41d7948caa64"}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e"}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e"}
{"level":"error","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892"}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb"}
{"level":"debug","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb"}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1ca9f0c7470f93c500ce1cd05520631627216ced3aec8cce0cdcdc2711a039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1ca9f0c7470f93c500ce1cd05520631627216ced3aec8cce0cdcdc2711a039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1ca9f0c7470f93c500ce1cd05520631627216ced3aec8cce0cdcdc2711a039"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b1ca9f0c7470f93c500ce1cd05520631627216ced3aec8cce0cdcdc2711a039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b1ca9f0c7470f93c500ce1cd05520631627216ced3aec8cce0cdcdc2711a039"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b1ca9f0c7470f93c500ce1cd05520631627216ced3aec8cce0cdcdc2711a039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b1ca9f0c7470f93c500ce1cd05520631627216ced3aec8cce0cdcdc2711a039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b1ca9f0c7470f93c500ce1cd05520631627216ced3aec8cce0cdcdc2711a039"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94"}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c799b0b388c45fe17d6a68c922c5bdcd8803ef34f63d4cc71c8888310ca0775","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c799b0b388c45fe17d6a68c922c5bdcd8803ef34f63d4cc71c8888310ca0775","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c799b0b388c45fe17d6a68c922c5bdcd8803ef34f63d4cc71c8888310ca0775"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c799b0b388c45fe17d6a68c922c5bdcd8803ef34f63d4cc71c8888310ca0775","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c799b0b388c45fe17d6a68c922c5bdcd8803ef34f63d4cc71c8888310ca0775"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c799b0b388c45fe17d6a68c922c5bdcd8803ef34f63d4cc71c8888310ca0775","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c799b0b388c45fe17d6a68c922c5bdcd8803ef34f63d4cc71c8888310ca0775","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46ccf4f2905e9252e4f1cf38a57dc27fd4a0f4ac34dc30c69eb3873400b4c67b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c799b0b388c45fe17d6a68c922c5bdcd8803ef34f63d4cc71c8888310ca0775"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46ccf4f2905e9252e4f1cf38a57dc27fd4a0f4ac34dc30c69eb3873400b4c67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46ccf4f2905e9252e4f1cf38a57dc27fd4a0f4ac34dc30c69eb3873400b4c67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ddae0975abb1c0b43fa4dc9b17af682269f577ff318255110058c193aaa459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ddae0975abb1c0b43fa4dc9b17af682269f577ff318255110058c193aaa459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ccf4f2905e9252e4f1cf38a57dc27fd4a0f4ac34dc30c69eb3873400b4c67b"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46ccf4f2905e9252e4f1cf38a57dc27fd4a0f4ac34dc30c69eb3873400b4c67b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46ccf4f2905e9252e4f1cf38a57dc27fd4a0f4ac34dc30c69eb3873400b4c67b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46ccf4f2905e9252e4f1cf38a57dc27fd4a0f4ac34dc30c69eb3873400b4c67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ddae0975abb1c0b43fa4dc9b17af682269f577ff318255110058c193aaa459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ddae0975abb1c0b43fa4dc9b17af682269f577ff318255110058c193aaa459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f1c031f2ac01575427de58d43a5358b6eb8f8ad56eed027e5bde78f0997725e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ddae0975abb1c0b43fa4dc9b17af682269f577ff318255110058c193aaa459"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f1c031f2ac01575427de58d43a5358b6eb8f8ad56eed027e5bde78f0997725e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90e7f8f7539c218f2decb3940ecf39dbde9ac27db2eeee6f31dfed8575b85d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90e7f8f7539c218f2decb3940ecf39dbde9ac27db2eeee6f31dfed8575b85d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f1c031f2ac01575427de58d43a5358b6eb8f8ad56eed027e5bde78f0997725e"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ca85c80f3c640565b0a1f1051a9dd71a2017cdf63729987f2dcb62144f9eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90e7f8f7539c218f2decb3940ecf39dbde9ac27db2eeee6f31dfed8575b85d6"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ca85c80f3c640565b0a1f1051a9dd71a2017cdf63729987f2dcb62144f9eb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46ccf4f2905e9252e4f1cf38a57dc27fd4a0f4ac34dc30c69eb3873400b4c67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ddae0975abb1c0b43fa4dc9b17af682269f577ff318255110058c193aaa459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ddae0975abb1c0b43fa4dc9b17af682269f577ff318255110058c193aaa459"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ddae0975abb1c0b43fa4dc9b17af682269f577ff318255110058c193aaa459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f1c031f2ac01575427de58d43a5358b6eb8f8ad56eed027e5bde78f0997725e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f1c031f2ac01575427de58d43a5358b6eb8f8ad56eed027e5bde78f0997725e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f1c031f2ac01575427de58d43a5358b6eb8f8ad56eed027e5bde78f0997725e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ca85c80f3c640565b0a1f1051a9dd71a2017cdf63729987f2dcb62144f9eb8"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ccf4f2905e9252e4f1cf38a57dc27fd4a0f4ac34dc30c69eb3873400b4c67b"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ddae0975abb1c0b43fa4dc9b17af682269f577ff318255110058c193aaa459"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90e7f8f7539c218f2decb3940ecf39dbde9ac27db2eeee6f31dfed8575b85d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90e7f8f7539c218f2decb3940ecf39dbde9ac27db2eeee6f31dfed8575b85d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de96665bba1160d8256ea65252751ecb554b5a8c26a34cf2041b79a9e5c12aa5"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90e7f8f7539c218f2decb3940ecf39dbde9ac27db2eeee6f31dfed8575b85d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de96665bba1160d8256ea65252751ecb554b5a8c26a34cf2041b79a9e5c12aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de96665bba1160d8256ea65252751ecb554b5a8c26a34cf2041b79a9e5c12aa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3631fb16a6d1013f6aed0662cf112e1b0f3375aae6215b922a21a89d86a49b32"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279b283a858c54ba3fa165f3061ada83200ba2a6068bbb2372d815bce557f022"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a1e60253037a30701c9b18823ba05229fdee1f76efcd0c6a68ea0ad0ba3e11"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de96665bba1160d8256ea65252751ecb554b5a8c26a34cf2041b79a9e5c12aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ca85c80f3c640565b0a1f1051a9dd71a2017cdf63729987f2dcb62144f9eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16ca85c80f3c640565b0a1f1051a9dd71a2017cdf63729987f2dcb62144f9eb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f1c031f2ac01575427de58d43a5358b6eb8f8ad56eed027e5bde78f0997725e"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eee0e7ecb91ec019e91e4a42c4a5ee0b0865cd68bd6b8bb0c8cf8de2c3b3da3a"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ca85c80f3c640565b0a1f1051a9dd71a2017cdf63729987f2dcb62144f9eb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3631fb16a6d1013f6aed0662cf112e1b0f3375aae6215b922a21a89d86a49b32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3631fb16a6d1013f6aed0662cf112e1b0f3375aae6215b922a21a89d86a49b32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872c637d4ca43b984b2a02b450501d0aac969636e9786ee12744dd89366ce6e2"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90e7f8f7539c218f2decb3940ecf39dbde9ac27db2eeee6f31dfed8575b85d6"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3631fb16a6d1013f6aed0662cf112e1b0f3375aae6215b922a21a89d86a49b32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ddae0975abb1c0b43fa4dc9b17af682269f577ff318255110058c193aaa459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"279b283a858c54ba3fa165f3061ada83200ba2a6068bbb2372d815bce557f022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["279b283a858c54ba3fa165f3061ada83200ba2a6068bbb2372d815bce557f022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de96665bba1160d8256ea65252751ecb554b5a8c26a34cf2041b79a9e5c12aa5"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ca85c80f3c640565b0a1f1051a9dd71a2017cdf63729987f2dcb62144f9eb8"}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"279b283a858c54ba3fa165f3061ada83200ba2a6068bbb2372d815bce557f022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14a1e60253037a30701c9b18823ba05229fdee1f76efcd0c6a68ea0ad0ba3e11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14a1e60253037a30701c9b18823ba05229fdee1f76efcd0c6a68ea0ad0ba3e11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3631fb16a6d1013f6aed0662cf112e1b0f3375aae6215b922a21a89d86a49b32"}
{"level":"info","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279b283a858c54ba3fa165f3061ada83200ba2a6068bbb2372d815bce557f022"}
{"level":"info","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14a1e60253037a30701c9b18823ba05229fdee1f76efcd0c6a68ea0ad0ba3e11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f1c031f2ac01575427de58d43a5358b6eb8f8ad56eed027e5bde78f0997725e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eee0e7ecb91ec019e91e4a42c4a5ee0b0865cd68bd6b8bb0c8cf8de2c3b3da3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eee0e7ecb91ec019e91e4a42c4a5ee0b0865cd68bd6b8bb0c8cf8de2c3b3da3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a1e60253037a30701c9b18823ba05229fdee1f76efcd0c6a68ea0ad0ba3e11"}
{"level":"info","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eee0e7ecb91ec019e91e4a42c4a5ee0b0865cd68bd6b8bb0c8cf8de2c3b3da3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872c637d4ca43b984b2a02b450501d0aac969636e9786ee12744dd89366ce6e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:54:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:54:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872c637d4ca43b984b2a02b450501d0aac969636e9786ee12744dd89366ce6e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eee0e7ecb91ec019e91e4a42c4a5ee0b0865cd68bd6b8bb0c8cf8de2c3b3da3a"}
{"level":"info","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872c637d4ca43b984b2a02b450501d0aac969636e9786ee12744dd89366ce6e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90e7f8f7539c218f2decb3940ecf39dbde9ac27db2eeee6f31dfed8575b85d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de96665bba1160d8256ea65252751ecb554b5a8c26a34cf2041b79a9e5c12aa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ca85c80f3c640565b0a1f1051a9dd71a2017cdf63729987f2dcb62144f9eb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3631fb16a6d1013f6aed0662cf112e1b0f3375aae6215b922a21a89d86a49b32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"279b283a858c54ba3fa165f3061ada83200ba2a6068bbb2372d815bce557f022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14a1e60253037a30701c9b18823ba05229fdee1f76efcd0c6a68ea0ad0ba3e11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eee0e7ecb91ec019e91e4a42c4a5ee0b0865cd68bd6b8bb0c8cf8de2c3b3da3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872c637d4ca43b984b2a02b450501d0aac969636e9786ee12744dd89366ce6e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T04:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872c637d4ca43b984b2a02b450501d0aac969636e9786ee12744dd89366ce6e2"}
{"level":"info","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35692","PortSpecifier":{"PortValue":35692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35692","PortSpecifier":{"PortValue":35692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609692,"nanos":737090022},"http":{"id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","method":"POST","headers":{":authority":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6a8f2c9-13b2-4323-b858-7467db5432f1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59a7bdeb-2676-4354-9096-4513da48b61d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2965c9724885"]}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2965c9724885"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59a7bdeb-2676-4354-9096-4513da48b61d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6a8f2c9-13b2-4323-b858-7467db5432f1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9fdb31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b229a552-f2c7-4ae7-8caf-2976abd8898e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33166","PortSpecifier":{"PortValue":33166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4de716.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33166","PortSpecifier":{"PortValue":33166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609692,"nanos":778843671},"http":{"id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","method":"POST","headers":{":authority":"e2e-shared-b-4de716.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6a8f2c9-13b2-4323-b858-7467db5432f1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59a7bdeb-2676-4354-9096-4513da48b61d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2965c9724885"]}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2965c9724885"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59a7bdeb-2676-4354-9096-4513da48b61d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6a8f2c9-13b2-4323-b858-7467db5432f1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4de716.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4de716/rate-test-model-4de716\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4de716/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acd995c7-1d28-4d08-a3c3-ef57d1d9eb22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4323cad4-9236-464c-b3ca-c082d7631427","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54344","PortSpecifier":{"PortValue":54344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4323cad4-9236-464c-b3ca-c082d7631427","method":"POST","path":"/ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31/v1/completions","host":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4323cad4-9236-464c-b3ca-c082d7631427","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54344","PortSpecifier":{"PortValue":54344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609692,"nanos":820064837},"http":{"id":"4323cad4-9236-464c-b3ca-c082d7631427","method":"POST","headers":{":authority":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4323cad4-9236-464c-b3ca-c082d7631427","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PE8YNvb7P7qwACIQ_rqBFEOrRa9fhmN2B9ORskSphvwWweG9Dz1wcEaXlvVC"}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4323cad4-9236-464c-b3ca-c082d7631427","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PE8YNvb7P7qwACIQ_rqBFEOrRa9fhmN2B9ORskSphvwWweG9Dz1wcEaXlvVC\"}"}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4323cad4-9236-464c-b3ca-c082d7631427","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70f0b85e-c449-4264-8c92-2b6f394428c9","keyName":"e2e-rate-a-2b52ff","subscription":"e2e-rate-iso-a-2b52ff","tenant":"e2e-shared-a-9fdb31","userId":"70f0b85e-c449-4264-8c92-2b6f394428c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4323cad4-9236-464c-b3ca-c082d7631427","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\",\"requestedSubscription\":\"e2e-rate-iso-a-2b52ff\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4323cad4-9236-464c-b3ca-c082d7631427","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9fdb31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2b52ff","namespace":"ai-tenant-e2e-shared-a-9fdb31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31"}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4323cad4-9236-464c-b3ca-c082d7631427","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4323cad4-9236-464c-b3ca-c082d7631427","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4323cad4-9236-464c-b3ca-c082d7631427","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4323cad4-9236-464c-b3ca-c082d7631427","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9fdb31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4323cad4-9236-464c-b3ca-c082d7631427","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4323cad4-9236-464c-b3ca-c082d7631427","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4323cad4-9236-464c-b3ca-c082d7631427","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4323cad4-9236-464c-b3ca-c082d7631427","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2b52ff"}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4323cad4-9236-464c-b3ca-c082d7631427","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70f0b85e-c449-4264-8c92-2b6f394428c9","keyName":"e2e-rate-a-2b52ff","selected_subscription":"e2e-rate-iso-a-2b52ff","selected_subscription_key":"ai-tenant-e2e-shared-a-9fdb31/e2e-rate-iso-a-2b52ff@ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9fdb31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2b52ff","namespace":"ai-tenant-e2e-shared-a-9fdb31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4323cad4-9236-464c-b3ca-c082d7631427","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4323cad4-9236-464c-b3ca-c082d7631427","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54350","PortSpecifier":{"PortValue":54350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","method":"POST","path":"/ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31/v1/completions","host":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54350","PortSpecifier":{"PortValue":54350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609693,"nanos":877777275},"http":{"id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","method":"POST","headers":{":authority":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PE8YNvb7P7qwACIQ_rqBFEOrRa9fhmN2B9ORskSphvwWweG9Dz1wcEaXlvVC"}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PE8YNvb7P7qwACIQ_rqBFEOrRa9fhmN2B9ORskSphvwWweG9Dz1wcEaXlvVC\"}"}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70f0b85e-c449-4264-8c92-2b6f394428c9","keyName":"e2e-rate-a-2b52ff","subscription":"e2e-rate-iso-a-2b52ff","tenant":"e2e-shared-a-9fdb31","userId":"70f0b85e-c449-4264-8c92-2b6f394428c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\",\"requestedSubscription\":\"e2e-rate-iso-a-2b52ff\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9fdb31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2b52ff","namespace":"ai-tenant-e2e-shared-a-9fdb31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31"}}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9fdb31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2b52ff"}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70f0b85e-c449-4264-8c92-2b6f394428c9","keyName":"e2e-rate-a-2b52ff","selected_subscription":"e2e-rate-iso-a-2b52ff","selected_subscription_key":"ai-tenant-e2e-shared-a-9fdb31/e2e-rate-iso-a-2b52ff@ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9fdb31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2b52ff","namespace":"ai-tenant-e2e-shared-a-9fdb31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:54:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa07f062-6f01-4c54-b754-657a99a4c9a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54364","PortSpecifier":{"PortValue":54364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c477d573-7511-4e08-ae6c-e784a5da652b","method":"POST","path":"/ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31/v1/completions","host":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54364","PortSpecifier":{"PortValue":54364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609694,"nanos":924101460},"http":{"id":"c477d573-7511-4e08-ae6c-e784a5da652b","method":"POST","headers":{":authority":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PE8YNvb7P7qwACIQ_rqBFEOrRa9fhmN2B9ORskSphvwWweG9Dz1wcEaXlvVC"}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PE8YNvb7P7qwACIQ_rqBFEOrRa9fhmN2B9ORskSphvwWweG9Dz1wcEaXlvVC\"}"}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70f0b85e-c449-4264-8c92-2b6f394428c9","keyName":"e2e-rate-a-2b52ff","subscription":"e2e-rate-iso-a-2b52ff","tenant":"e2e-shared-a-9fdb31","userId":"70f0b85e-c449-4264-8c92-2b6f394428c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\",\"requestedSubscription\":\"e2e-rate-iso-a-2b52ff\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9fdb31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2b52ff","namespace":"ai-tenant-e2e-shared-a-9fdb31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31"}}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9fdb31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2b52ff"}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70f0b85e-c449-4264-8c92-2b6f394428c9","keyName":"e2e-rate-a-2b52ff","selected_subscription":"e2e-rate-iso-a-2b52ff","selected_subscription_key":"ai-tenant-e2e-shared-a-9fdb31/e2e-rate-iso-a-2b52ff@ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9fdb31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2b52ff","namespace":"ai-tenant-e2e-shared-a-9fdb31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c477d573-7511-4e08-ae6c-e784a5da652b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35438","PortSpecifier":{"PortValue":35438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35438","PortSpecifier":{"PortValue":35438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609707,"nanos":895174988},"http":{"id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","method":"POST","headers":{":authority":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6a8f2c9-13b2-4323-b858-7467db5432f1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59a7bdeb-2676-4354-9096-4513da48b61d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2965c9724885"]}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2965c9724885"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59a7bdeb-2676-4354-9096-4513da48b61d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6a8f2c9-13b2-4323-b858-7467db5432f1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9fdb31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a30a0823-4f39-4e5f-876b-f77a3cb4d9fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58792","PortSpecifier":{"PortValue":58792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4de716.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58792","PortSpecifier":{"PortValue":58792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609707,"nanos":935808559},"http":{"id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","method":"POST","headers":{":authority":"e2e-shared-b-4de716.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a6a8f2c9-13b2-4323-b858-7467db5432f1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59a7bdeb-2676-4354-9096-4513da48b61d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2965c9724885"]}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2965c9724885"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59a7bdeb-2676-4354-9096-4513da48b61d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a6a8f2c9-13b2-4323-b858-7467db5432f1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4de716.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4de716/rate-test-model-4de716\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4de716/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30bf926f-6c7d-4c63-9578-15a7ee76cbf0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35440","PortSpecifier":{"PortValue":35440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","method":"POST","path":"/ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31/v1/completions","host":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35440","PortSpecifier":{"PortValue":35440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609707,"nanos":972473757},"http":{"id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","method":"POST","headers":{":authority":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JfkEq4W4lssjqXPc_dljatcpCuCEGIefyq3lm1AwZ5K0uSe44eYM3l8pEmUj"}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JfkEq4W4lssjqXPc_dljatcpCuCEGIefyq3lm1AwZ5K0uSe44eYM3l8pEmUj\"}"}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d3827d6-9d4e-43f9-83e4-17e09800dec6","keyName":"e2e-rate-a-09f18f","subscription":"e2e-rate-iso-a-09f18f","tenant":"e2e-shared-a-9fdb31","userId":"0d3827d6-9d4e-43f9-83e4-17e09800dec6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\",\"requestedSubscription\":\"e2e-rate-iso-a-09f18f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9fdb31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09f18f","namespace":"ai-tenant-e2e-shared-a-9fdb31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31"}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9fdb31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-09f18f"}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d3827d6-9d4e-43f9-83e4-17e09800dec6","keyName":"e2e-rate-a-09f18f","selected_subscription":"e2e-rate-iso-a-09f18f","selected_subscription_key":"ai-tenant-e2e-shared-a-9fdb31/e2e-rate-iso-a-09f18f@ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9fdb31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09f18f","namespace":"ai-tenant-e2e-shared-a-9fdb31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:55:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aeae1b9b-a90c-4cba-b6f8-8d88ed598c22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35450","PortSpecifier":{"PortValue":35450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a5adf98-c658-4055-a7e8-cb8586f64562","method":"POST","path":"/ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31/v1/completions","host":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35450","PortSpecifier":{"PortValue":35450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609709,"nanos":7870106},"http":{"id":"2a5adf98-c658-4055-a7e8-cb8586f64562","method":"POST","headers":{":authority":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JfkEq4W4lssjqXPc_dljatcpCuCEGIefyq3lm1AwZ5K0uSe44eYM3l8pEmUj"}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JfkEq4W4lssjqXPc_dljatcpCuCEGIefyq3lm1AwZ5K0uSe44eYM3l8pEmUj\"}"}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d3827d6-9d4e-43f9-83e4-17e09800dec6","keyName":"e2e-rate-a-09f18f","subscription":"e2e-rate-iso-a-09f18f","tenant":"e2e-shared-a-9fdb31","userId":"0d3827d6-9d4e-43f9-83e4-17e09800dec6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\",\"requestedSubscription\":\"e2e-rate-iso-a-09f18f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9fdb31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09f18f","namespace":"ai-tenant-e2e-shared-a-9fdb31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31"}}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9fdb31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-09f18f"}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d3827d6-9d4e-43f9-83e4-17e09800dec6","keyName":"e2e-rate-a-09f18f","selected_subscription":"e2e-rate-iso-a-09f18f","selected_subscription_key":"ai-tenant-e2e-shared-a-9fdb31/e2e-rate-iso-a-09f18f@ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9fdb31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09f18f","namespace":"ai-tenant-e2e-shared-a-9fdb31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:55:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a5adf98-c658-4055-a7e8-cb8586f64562","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35464","PortSpecifier":{"PortValue":35464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff854064-59c3-42c1-b614-6075d54ae6e7","method":"POST","path":"/ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31/v1/completions","host":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35464","PortSpecifier":{"PortValue":35464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609710,"nanos":48823854},"http":{"id":"ff854064-59c3-42c1-b614-6075d54ae6e7","method":"POST","headers":{":authority":"e2e-shared-a-9fdb31.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JfkEq4W4lssjqXPc_dljatcpCuCEGIefyq3lm1AwZ5K0uSe44eYM3l8pEmUj"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JfkEq4W4lssjqXPc_dljatcpCuCEGIefyq3lm1AwZ5K0uSe44eYM3l8pEmUj\"}"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d3827d6-9d4e-43f9-83e4-17e09800dec6","keyName":"e2e-rate-a-09f18f","subscription":"e2e-rate-iso-a-09f18f","tenant":"e2e-shared-a-9fdb31","userId":"0d3827d6-9d4e-43f9-83e4-17e09800dec6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\",\"requestedSubscription\":\"e2e-rate-iso-a-09f18f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9fdb31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9fdb31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09f18f","namespace":"ai-tenant-e2e-shared-a-9fdb31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31"}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9fdb31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-09f18f"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d3827d6-9d4e-43f9-83e4-17e09800dec6","keyName":"e2e-rate-a-09f18f","selected_subscription":"e2e-rate-iso-a-09f18f","selected_subscription_key":"ai-tenant-e2e-shared-a-9fdb31/e2e-rate-iso-a-09f18f@ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9fdb31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09f18f","namespace":"ai-tenant-e2e-shared-a-9fdb31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9fdb31/rate-test-model-9fdb31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff854064-59c3-42c1-b614-6075d54ae6e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58802","PortSpecifier":{"PortValue":58802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb49d097-8985-4879-8c72-7461dee1e6cb","method":"POST","path":"/ai-tenant-e2e-shared-b-4de716/rate-test-model-4de716/v1/completions","host":"e2e-shared-b-4de716.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58802","PortSpecifier":{"PortValue":58802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609710,"nanos":95013660},"http":{"id":"fb49d097-8985-4879-8c72-7461dee1e6cb","method":"POST","headers":{":authority":"e2e-shared-b-4de716.apps.8a2dc4e9-7e81-4c62-8674-2965c9724885.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-4de716/rate-test-model-4de716/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VqrR84Z3hCLFNICr_d0y0APol0doSfxfwZDzJ3gNxAhAzmvyngnSaxtTvcO4"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4de716.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VqrR84Z3hCLFNICr_d0y0APol0doSfxfwZDzJ3gNxAhAzmvyngnSaxtTvcO4\"}"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4de716.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a85d6098-ab6a-4b82-ba27-de937b582169","keyName":"e2e-rate-b-09f18f","subscription":"e2e-rate-iso-b-09f18f","tenant":"e2e-shared-b-4de716","userId":"a85d6098-ab6a-4b82-ba27-de937b582169","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-4de716.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-4de716/rate-test-model-4de716\",\"requestedSubscription\":\"e2e-rate-iso-b-09f18f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4de716.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4de716","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-09f18f","namespace":"ai-tenant-e2e-shared-b-4de716","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-4de716/rate-test-model-4de716"}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4de716/rate-test-model-4de716\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4de716/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-09f18f"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a85d6098-ab6a-4b82-ba27-de937b582169","keyName":"e2e-rate-b-09f18f","selected_subscription":"e2e-rate-iso-b-09f18f","selected_subscription_key":"ai-tenant-e2e-shared-b-4de716/e2e-rate-iso-b-09f18f@ai-tenant-e2e-shared-b-4de716/rate-test-model-4de716","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4de716","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-09f18f","namespace":"ai-tenant-e2e-shared-b-4de716","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-4de716/rate-test-model-4de716"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T04:55:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb49d097-8985-4879-8c72-7461dee1e6cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a90e7f8f7539c218f2decb3940ecf39dbde9ac27db2eeee6f31dfed8575b85d6"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46ccf4f2905e9252e4f1cf38a57dc27fd4a0f4ac34dc30c69eb3873400b4c67b"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1859310932dbc69e3c31f19c5a469a6609a1d7187bafe243ffb5ec941184da94"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c276793bad384766dc8337b6b66a49dead73abb5ec2b2be0f4ee744dc91b2a2"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16ca85c80f3c640565b0a1f1051a9dd71a2017cdf63729987f2dcb62144f9eb8"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bd44ce752b16717910754b268bae965d662bcf407f5581ac163759705cbf048"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad4917b26612efab98a32b24d6e798ace85b09edc50fd3d80299e4d9a011a33e"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7b8e2db25bbfcaa2bb6e2db0967e35d41d425b40372de695157281fe1e7edf2"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/279b283a858c54ba3fa165f3061ada83200ba2a6068bbb2372d815bce557f022"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/508d47a47a0d0deb2c4d32bc35370ce1fc34ea32cf1402b98bac1317301a5e0e"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ad73c14674c97cae1817435020bdf06aabe5ff3e323f1b3e9f866a2132b0beb"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3631fb16a6d1013f6aed0662cf112e1b0f3375aae6215b922a21a89d86a49b32"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de96665bba1160d8256ea65252751ecb554b5a8c26a34cf2041b79a9e5c12aa5"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0ddae0975abb1c0b43fa4dc9b17af682269f577ff318255110058c193aaa459"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14a1e60253037a30701c9b18823ba05229fdee1f76efcd0c6a68ea0ad0ba3e11"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f1c031f2ac01575427de58d43a5358b6eb8f8ad56eed027e5bde78f0997725e"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f218baaa18d497ba2d944fde449863fed75a86ab56c7b1d07d042435af14b6e5"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c182f43c949cbcb3a6cd6da9fa16461f08c51a7779d6ee7fc2bf4a10714620f4"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eee0e7ecb91ec019e91e4a42c4a5ee0b0865cd68bd6b8bb0c8cf8de2c3b3da3a"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fd6f266f2d95978f63025a1d1242339f2da17cf94a1d8f116ad41d7948caa64"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/872c637d4ca43b984b2a02b450501d0aac969636e9786ee12744dd89366ce6e2"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c799b0b388c45fe17d6a68c922c5bdcd8803ef34f63d4cc71c8888310ca0775"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b1ca9f0c7470f93c500ce1cd05520631627216ced3aec8cce0cdcdc2711a039"}
{"level":"info","ts":"2026-07-21T04:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdc75fe7856462f60bca611858e2a24425774e148e8c453a19e218cf2b353892"}