{"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"error","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"error","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"} {"level":"error","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"error","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"error","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0"} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0"} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36658","PortSpecifier":{"PortValue":36658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","object":"source:{address:{socket_address:{address:\"10.133.0.11:36658\" port_value:36658}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953839 nanos:989255702} http:{id:\"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":989255702,"seconds":1785953839}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36658},"address":"10.133.0.11:36658"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":989255702,"seconds":1785953839},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:36658","port":36658}}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47974","PortSpecifier":{"PortValue":47974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","object":"source:{address:{socket_address:{address:\"10.133.0.11:47974\" port_value:47974}}} destination:{address:{socket_address:{address:\"10.134.0.71:443\" port_value:443}}} request:{time:{seconds:1785953840 nanos:27775671} http:{id:\"cb660c6b-aae7-42b9-af21-1b66a0a71cb5\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01OTRiNjUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdC05OTlkNDQ0NDgtbDdkYmgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNTk0YjY1LW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"cb660c6b-aae7-42b9-af21-1b66a0a71cb5\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01OTRiNjUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdC05OTlkNDQ0NDgtbDdkYmgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNTk0YjY1LW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":27775671,"seconds":1785953840}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47974},"address":"10.133.0.11:47974"}}}}},"destination":{"address":"10.134.0.71:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":27775671,"seconds":1785953840},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:47974","port":47974}}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36672","PortSpecifier":{"PortValue":36672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","object":"source:{address:{socket_address:{address:\"10.133.0.11:36672\" port_value:36672}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953840 nanos:79109812} http:{id:\"5065ca61-76fe-480f-be3c-c964b6ae7e06\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdC04NDhiOTRjNThkLXY4a3hwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"5065ca61-76fe-480f-be3c-c964b6ae7e06\"} path:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BmY0Ov8EODHV5p07_MTDTgi4riJXpu22y8Gmjsto0UOpwnLAe7g4gehiO8Xm"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","keyName":"e2e-rate-a-586562","subscription":"e2e-rate-iso-a-586562","tenant":"e2e-shared-a-ba69fc","userId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-586562","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5065ca61-76fe-480f-be3c-c964b6ae7e06"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":79109812,"seconds":1785953840}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36672},"address":"10.133.0.11:36672"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5065ca61-76fe-480f-be3c-c964b6ae7e06"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":79109812,"seconds":1785953840},"url_path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:36672","port":36672}}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-586562"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","keyName":"e2e-rate-a-586562","selected_subscription":"e2e-rate-iso-a-586562","selected_subscription_key":"ai-tenant-e2e-shared-a-ba69fc/e2e-rate-iso-a-586562@ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-586562","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36674","PortSpecifier":{"PortValue":36674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","object":"source:{address:{socket_address:{address:\"10.133.0.11:36674\" port_value:36674}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953841 nanos:122625574} http:{id:\"7723a87f-efb1-4bbf-8c41-190984f97d4c\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdC04NDhiOTRjNThkLXY4a3hwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"7723a87f-efb1-4bbf-8c41-190984f97d4c\"} path:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BmY0Ov8EODHV5p07_MTDTgi4riJXpu22y8Gmjsto0UOpwnLAe7g4gehiO8Xm"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","keyName":"e2e-rate-a-586562","subscription":"e2e-rate-iso-a-586562","tenant":"e2e-shared-a-ba69fc","userId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-586562","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7723a87f-efb1-4bbf-8c41-190984f97d4c"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":122625574,"seconds":1785953841}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36674},"address":"10.133.0.11:36674"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7723a87f-efb1-4bbf-8c41-190984f97d4c"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":122625574,"seconds":1785953841},"url_path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:36674","port":36674}}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-586562"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","keyName":"e2e-rate-a-586562","selected_subscription":"e2e-rate-iso-a-586562","selected_subscription_key":"ai-tenant-e2e-shared-a-ba69fc/e2e-rate-iso-a-586562@ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-586562","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80f88271-9f5c-4377-87db-7403e9145b57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38776","PortSpecifier":{"PortValue":38776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80f88271-9f5c-4377-87db-7403e9145b57","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80f88271-9f5c-4377-87db-7403e9145b57","object":"source:{address:{socket_address:{address:\"10.133.0.11:38776\" port_value:38776}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953842 nanos:161324627} http:{id:\"80f88271-9f5c-4377-87db-7403e9145b57\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"80f88271-9f5c-4377-87db-7403e9145b57\"} path:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BmY0Ov8EODHV5p07_MTDTgi4riJXpu22y8Gmjsto0UOpwnLAe7g4gehiO8Xm"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","keyName":"e2e-rate-a-586562","subscription":"e2e-rate-iso-a-586562","tenant":"e2e-shared-a-ba69fc","userId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-586562","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80f88271-9f5c-4377-87db-7403e9145b57","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"80f88271-9f5c-4377-87db-7403e9145b57"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"80f88271-9f5c-4377-87db-7403e9145b57","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":161324627,"seconds":1785953842}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38776},"address":"10.133.0.11:38776"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"80f88271-9f5c-4377-87db-7403e9145b57"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"80f88271-9f5c-4377-87db-7403e9145b57","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":161324627,"seconds":1785953842},"url_path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:38776","port":38776}}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-586562"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","keyName":"e2e-rate-a-586562","selected_subscription":"e2e-rate-iso-a-586562","selected_subscription_key":"ai-tenant-e2e-shared-a-ba69fc/e2e-rate-iso-a-586562@ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-586562","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80f88271-9f5c-4377-87db-7403e9145b57","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80f88271-9f5c-4377-87db-7403e9145b57","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54420","PortSpecifier":{"PortValue":54420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","method":"POST","path":"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions","host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","object":"source:{address:{socket_address:{address:\"10.133.0.11:54420\" port_value:54420}}} destination:{address:{socket_address:{address:\"10.134.0.71:443\" port_value:443}}} request:{time:{seconds:1785953842 nanos:198491959} http:{id:\"b59f996d-2cb2-48dd-aba0-54965549ee6a\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-594b65-kserve-workload-svc.ai-tenant-e2e-shared-b-594b65.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01OTRiNjUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdC05OTlkNDQ0NDgtbDdkYmgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNTk0YjY1LW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"b59f996d-2cb2-48dd-aba0-54965549ee6a\"} path:\"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions\" host:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YJPiTcsOy8Gbh9XM_U43x0kR7Fi19QQU44xtkhJo1205zj9gkcG8zkc3zpai"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f6ef261a-4a98-4e13-9f4b-40410928b0f8","keyName":"e2e-rate-b-586562","subscription":"e2e-rate-iso-b-586562","tenant":"e2e-shared-b-594b65","userId":"f6ef261a-4a98-4e13-9f4b-40410928b0f8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m","name":"rate-test-model-594b65","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-586562","namespace":"ai-tenant-e2e-shared-b-594b65","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65"}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-594b65-kserve-workload-svc.ai-tenant-e2e-shared-b-594b65.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"b59f996d-2cb2-48dd-aba0-54965549ee6a"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","method":"POST","path":"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":198491959,"seconds":1785953842}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":54420},"address":"10.133.0.11:54420"}}}}},"destination":{"address":"10.134.0.71:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"},"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-594b65-kserve-workload-svc.ai-tenant-e2e-shared-b-594b65.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"b59f996d-2cb2-48dd-aba0-54965549ee6a"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","method":"POST","path":"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":198491959,"seconds":1785953842},"url_path":"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:54420","port":54420}}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-586562"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f6ef261a-4a98-4e13-9f4b-40410928b0f8","keyName":"e2e-rate-b-586562","selected_subscription":"e2e-rate-iso-b-586562","selected_subscription_key":"ai-tenant-e2e-shared-b-594b65/e2e-rate-iso-b-586562@ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m","name":"rate-test-model-594b65","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-586562","namespace":"ai-tenant-e2e-shared-b-594b65","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"} {"level":"info","ts":"2026-08-05T18:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfb4ff1a762a6cd3d921f131a7b55a3f62d29b435095492404d71701833de43c"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b7220d121f6bbd2335aecc5fb9fae49fa71b5b4d20f8ebaf90ae52d5c8a1230"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af"} {"level":"info","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35866","PortSpecifier":{"PortValue":35866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d5090db-2cdb-4d92-8a38-954970474ddd","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","object":"source:{address:{socket_address:{address:\"10.133.0.11:35866\" port_value:35866}}} destination:{address:{socket_address:{address:\"10.132.0.28:443\" port_value:443}}} request:{time:{seconds:1785953925 nanos:264435590} http:{id:\"5d5090db-2cdb-4d92-8a38-954970474ddd\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTZjeng1CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.28~maas-default-gateway-openshift-default-78bb78ff78-6czx5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"5d5090db-2cdb-4d92-8a38-954970474ddd\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=34.228.250.194;host=maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTZjeng1CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.28~maas-default-gateway-openshift-default-78bb78ff78-6czx5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5d5090db-2cdb-4d92-8a38-954970474ddd"},"host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"5d5090db-2cdb-4d92-8a38-954970474ddd","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":264435590,"seconds":1785953925}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35866},"address":"10.133.0.11:35866"}}}}},"destination":{"address":"10.132.0.28:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=34.228.250.194;host=maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTZjeng1CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.28~maas-default-gateway-openshift-default-78bb78ff78-6czx5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5d5090db-2cdb-4d92-8a38-954970474ddd"},"host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"5d5090db-2cdb-4d92-8a38-954970474ddd","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":264435590,"seconds":1785953925},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:35866","port":35866}}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35878","PortSpecifier":{"PortValue":35878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac69df82-cc5d-498b-a18b-28a760bdee29","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","object":"source:{address:{socket_address:{address:\"10.133.0.11:35878\" port_value:35878}}} destination:{address:{socket_address:{address:\"10.132.0.28:443\" port_value:443}}} request:{time:{seconds:1785953925 nanos:309594389} http:{id:\"ac69df82-cc5d-498b-a18b-28a760bdee29\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.28~maas-default-gateway-openshift-default-78bb78ff78-6czx5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"ac69df82-cc5d-498b-a18b-28a760bdee29\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OOzEJPB0zhCFSlk3_48Kjq4psJQfZo2S7nj040V0vuNbn9JtW4skjjAhJzYw"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d9bcd5b-dcc2-47a7-83a4-a346dd2a477c","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"0d9bcd5b-dcc2-47a7-83a4-a346dd2a477c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.28~maas-default-gateway-openshift-default-78bb78ff78-6czx5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"ac69df82-cc5d-498b-a18b-28a760bdee29"},"host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"ac69df82-cc5d-498b-a18b-28a760bdee29","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":309594389,"seconds":1785953925}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35878},"address":"10.133.0.11:35878"}}}}},"destination":{"address":"10.132.0.28:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTZjeng1CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.28~maas-default-gateway-openshift-default-78bb78ff78-6czx5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"ac69df82-cc5d-498b-a18b-28a760bdee29"},"host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"ac69df82-cc5d-498b-a18b-28a760bdee29","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":309594389,"seconds":1785953925},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:35878","port":35878}}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d9bcd5b-dcc2-47a7-83a4-a346dd2a477c","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"error","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"} {"level":"error","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e"} {"level":"error","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"} {"level":"info","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55394","PortSpecifier":{"PortValue":55394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4c88229-7bf4-4dd4-8757-765a10207480","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","object":"source:{address:{socket_address:{address:\"10.133.0.11:55394\" port_value:55394}}} destination:{address:{socket_address:{address:\"10.134.0.76:443\" port_value:443}}} request:{time:{seconds:1785953998 nanos:741188704} http:{id:\"e4c88229-7bf4-4dd4-8757-765a10207480\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.76~e2e-ipp-a-6427fe-openshift-default-7f7ddbf97d-hrhcl.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"e4c88229-7bf4-4dd4-8757-765a10207480\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS02NDI3ZmUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTY0MjdmZS1vcGVuc2hpZnQtZGVmYXVsdC03ZjdkZGJmOTdkLWhyaGNsCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTY0MjdmZS1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS02NDI3ZmUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.76~e2e-ipp-a-6427fe-openshift-default-7f7ddbf97d-hrhcl.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e4c88229-7bf4-4dd4-8757-765a10207480"},"host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"e4c88229-7bf4-4dd4-8757-765a10207480","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":741188704,"seconds":1785953998}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55394},"address":"10.133.0.11:55394"}}}}},"destination":{"address":"10.134.0.76:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363"},"headers":{":authority":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.76~e2e-ipp-a-6427fe-openshift-default-7f7ddbf97d-hrhcl.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e4c88229-7bf4-4dd4-8757-765a10207480"},"host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"e4c88229-7bf4-4dd4-8757-765a10207480","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":741188704,"seconds":1785953998},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55394","port":55394}}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-6427fe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55408","PortSpecifier":{"PortValue":55408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","method":"POST","path":"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions","host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","object":"source:{address:{socket_address:{address:\"10.133.0.11:55408\" port_value:55408}}} destination:{address:{socket_address:{address:\"10.134.0.76:443\" port_value:443}}} request:{time:{seconds:1785954000 nanos:803964337} http:{id:\"4f8a67b8-5029-4c37-894e-2221bb8f6c02\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-6427fe-kserve-workload-svc.ai-tenant-e2e-ipp-a-6427fe.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS02NDI3ZmUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTY0MjdmZS1vcGVuc2hpZnQtZGVmYXVsdC03ZjdkZGJmOTdkLWhyaGNsCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTY0MjdmZS1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS02NDI3ZmUtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.76~e2e-ipp-a-6427fe-openshift-default-7f7ddbf97d-hrhcl.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"4f8a67b8-5029-4c37-894e-2221bb8f6c02\"} path:\"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions\" host:\"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-22LjxGgXRIXSGnrL_P1E6S8p2QMxHSroJyZiot3ZW7g8YqbJc3kHsMRLEJIG"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"957f4e9b-10fc-4404-be6a-04b3f72383bd","keyName":"e2e-ipp-6427fe","subscription":"ipp-route-6427fe-sub","tenant":"e2e-ipp-a-6427fe","userId":"957f4e9b-10fc-4404-be6a-04b3f72383bd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-6427fe/models/facebook/opt-125m","name":"ipp-route-6427fe","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-6427fe-sub","namespace":"ai-tenant-e2e-ipp-a-6427fe","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe"}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-6427fe-kserve-workload-svc.ai-tenant-e2e-ipp-a-6427fe.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.76~e2e-ipp-a-6427fe-openshift-default-7f7ddbf97d-hrhcl.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02"},"host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","method":"POST","path":"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":803964337,"seconds":1785954000}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55408},"address":"10.133.0.11:55408"}}}}},"destination":{"address":"10.134.0.76:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"},"headers":{":authority":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-6427fe-kserve-workload-svc.ai-tenant-e2e-ipp-a-6427fe.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.76~e2e-ipp-a-6427fe-openshift-default-7f7ddbf97d-hrhcl.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02"},"host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","method":"POST","path":"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":803964337,"seconds":1785954000},"url_path":"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55408","port":55408}}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-6427fe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-6427fe-sub"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"957f4e9b-10fc-4404-be6a-04b3f72383bd","keyName":"e2e-ipp-6427fe","selected_subscription":"ipp-route-6427fe-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe-sub@ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-6427fe/models/facebook/opt-125m","name":"ipp-route-6427fe","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-6427fe-sub","namespace":"ai-tenant-e2e-ipp-a-6427fe","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da"}