{"level":"info","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0"} {"level":"info","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0"} {"level":"debug","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228"} {"level":"info","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228"} {"level":"info","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0"} {"level":"debug","ts":"2026-07-30T21:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2360a3033331dcc88f0879424b6777505269f9faf94e34eafc6d8228c92274d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2360a3033331dcc88f0879424b6777505269f9faf94e34eafc6d8228c92274d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2360a3033331dcc88f0879424b6777505269f9faf94e34eafc6d8228c92274d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2360a3033331dcc88f0879424b6777505269f9faf94e34eafc6d8228c92274d"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2360a3033331dcc88f0879424b6777505269f9faf94e34eafc6d8228c92274d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2360a3033331dcc88f0879424b6777505269f9faf94e34eafc6d8228c92274d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2360a3033331dcc88f0879424b6777505269f9faf94e34eafc6d8228c92274d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2360a3033331dcc88f0879424b6777505269f9faf94e34eafc6d8228c92274d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2360a3033331dcc88f0879424b6777505269f9faf94e34eafc6d8228c92274d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f241115ce6a87f6f907b7187da36d06e2c00b453c5ee8244d22ee36ebef55b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f241115ce6a87f6f907b7187da36d06e2c00b453c5ee8244d22ee36ebef55b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f241115ce6a87f6f907b7187da36d06e2c00b453c5ee8244d22ee36ebef55b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2360a3033331dcc88f0879424b6777505269f9faf94e34eafc6d8228c92274d"} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f241115ce6a87f6f907b7187da36d06e2c00b453c5ee8244d22ee36ebef55b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f241115ce6a87f6f907b7187da36d06e2c00b453c5ee8244d22ee36ebef55b2"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f241115ce6a87f6f907b7187da36d06e2c00b453c5ee8244d22ee36ebef55b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f241115ce6a87f6f907b7187da36d06e2c00b453c5ee8244d22ee36ebef55b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f241115ce6a87f6f907b7187da36d06e2c00b453c5ee8244d22ee36ebef55b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f241115ce6a87f6f907b7187da36d06e2c00b453c5ee8244d22ee36ebef55b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f241115ce6a87f6f907b7187da36d06e2c00b453c5ee8244d22ee36ebef55b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f241115ce6a87f6f907b7187da36d06e2c00b453c5ee8244d22ee36ebef55b2"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231"} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221966db44a243f9e4dc1440450c471167f9dd430049d9a4121f2d955dd46b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221966db44a243f9e4dc1440450c471167f9dd430049d9a4121f2d955dd46b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83b86fe415f39e5cd2d4e7315fab8fd29b1011a0c52eb6d00b1a49e72884f931","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83b86fe415f39e5cd2d4e7315fab8fd29b1011a0c52eb6d00b1a49e72884f931","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221966db44a243f9e4dc1440450c471167f9dd430049d9a4121f2d955dd46b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221966db44a243f9e4dc1440450c471167f9dd430049d9a4121f2d955dd46b5f"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221966db44a243f9e4dc1440450c471167f9dd430049d9a4121f2d955dd46b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83b86fe415f39e5cd2d4e7315fab8fd29b1011a0c52eb6d00b1a49e72884f931","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"221966db44a243f9e4dc1440450c471167f9dd430049d9a4121f2d955dd46b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["221966db44a243f9e4dc1440450c471167f9dd430049d9a4121f2d955dd46b5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"221966db44a243f9e4dc1440450c471167f9dd430049d9a4121f2d955dd46b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83b86fe415f39e5cd2d4e7315fab8fd29b1011a0c52eb6d00b1a49e72884f931","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83b86fe415f39e5cd2d4e7315fab8fd29b1011a0c52eb6d00b1a49e72884f931"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83b86fe415f39e5cd2d4e7315fab8fd29b1011a0c52eb6d00b1a49e72884f931","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"221966db44a243f9e4dc1440450c471167f9dd430049d9a4121f2d955dd46b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83b86fe415f39e5cd2d4e7315fab8fd29b1011a0c52eb6d00b1a49e72884f931","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83b86fe415f39e5cd2d4e7315fab8fd29b1011a0c52eb6d00b1a49e72884f931"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83b86fe415f39e5cd2d4e7315fab8fd29b1011a0c52eb6d00b1a49e72884f931","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:22:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83b86fe415f39e5cd2d4e7315fab8fd29b1011a0c52eb6d00b1a49e72884f931","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/221966db44a243f9e4dc1440450c471167f9dd430049d9a4121f2d955dd46b5f"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83b86fe415f39e5cd2d4e7315fab8fd29b1011a0c52eb6d00b1a49e72884f931"} {"level":"info","ts":"2026-07-30T21:22:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287"} {"level":"info","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:33664","PortSpecifier":{"PortValue":33664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","object":"source:{address:{socket_address:{address:\"10.134.0.12:33664\" port_value:33664}}} destination:{address:{socket_address:{address:\"10.133.0.45:443\" port_value:443}}} request:{time:{seconds:1785446555 nanos:560395171} http:{id:\"ad1a6fb0-a966-447e-91fe-e4b65622b3e2\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.45~e2e-shared-a-155c1d-openshift-default-d7b6d7d7b-6q9fj.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"ad1a6fb0-a966-447e-91fe-e4b65622b3e2\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"5df45c4a610b208eece79c355db3a0460747f4800948722da4488833e0fce336\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/73d7429660d2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=19b77a9e-e078-44f9-8e7a-970d3f81f3c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"16db301b-b48b-4663-b0c1-151a1a35116a","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/73d7429660d2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=19b77a9e-e078-44f9-8e7a-970d3f81f3c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"16db301b-b48b-4663-b0c1-151a1a35116a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5df45c4a610b208eece79c355db3a0460747f4800948722da4488833e0fce336"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.45~e2e-shared-a-155c1d-openshift-default-d7b6d7d7b-6q9fj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2"},"host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":560395171,"seconds":1785446555}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33664},"address":"10.134.0.12:33664"}}}}},"destination":{"address":"10.133.0.45:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"5df45c4a610b208eece79c355db3a0460747f4800948722da4488833e0fce336"},"headers":{":authority":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.45~e2e-shared-a-155c1d-openshift-default-d7b6d7d7b-6q9fj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2"},"host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":560395171,"seconds":1785446555},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:33664","port":33664}}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-155c1d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad1a6fb0-a966-447e-91fe-e4b65622b3e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7471f84c-5184-42bc-81fb-c13d9acec430","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:44780","PortSpecifier":{"PortValue":44780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7471f84c-5184-42bc-81fb-c13d9acec430","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7471f84c-5184-42bc-81fb-c13d9acec430","object":"source:{address:{socket_address:{address:\"10.134.0.12:44780\" port_value:44780}}} destination:{address:{socket_address:{address:\"10.133.0.46:443\" port_value:443}}} request:{time:{seconds:1785446555 nanos:600443582} http:{id:\"7471f84c-5184-42bc-81fb-c13d9acec430\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-01bc1b.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.46~e2e-shared-b-01bc1b-openshift-default-65c6f59964-r2ssd.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"7471f84c-5184-42bc-81fb-c13d9acec430\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7471f84c-5184-42bc-81fb-c13d9acec430","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7471f84c-5184-42bc-81fb-c13d9acec430","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/73d7429660d2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=19b77a9e-e078-44f9-8e7a-970d3f81f3c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"16db301b-b48b-4663-b0c1-151a1a35116a","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7471f84c-5184-42bc-81fb-c13d9acec430","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/73d7429660d2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=19b77a9e-e078-44f9-8e7a-970d3f81f3c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"16db301b-b48b-4663-b0c1-151a1a35116a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-01bc1b.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.46~e2e-shared-b-01bc1b-openshift-default-65c6f59964-r2ssd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"7471f84c-5184-42bc-81fb-c13d9acec430"},"host":"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"7471f84c-5184-42bc-81fb-c13d9acec430","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":600443582,"seconds":1785446555}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44780},"address":"10.134.0.12:44780"}}}}},"destination":{"address":"10.133.0.46:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c"},"headers":{":authority":"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-01bc1b.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.46~e2e-shared-b-01bc1b-openshift-default-65c6f59964-r2ssd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"7471f84c-5184-42bc-81fb-c13d9acec430"},"host":"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"7471f84c-5184-42bc-81fb-c13d9acec430","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":600443582,"seconds":1785446555},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:44780","port":44780}}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7471f84c-5184-42bc-81fb-c13d9acec430","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7471f84c-5184-42bc-81fb-c13d9acec430","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7471f84c-5184-42bc-81fb-c13d9acec430","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01bc1b/rate-test-model-01bc1b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01bc1b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7471f84c-5184-42bc-81fb-c13d9acec430","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7471f84c-5184-42bc-81fb-c13d9acec430","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7471f84c-5184-42bc-81fb-c13d9acec430","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7471f84c-5184-42bc-81fb-c13d9acec430","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7471f84c-5184-42bc-81fb-c13d9acec430","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:33680","PortSpecifier":{"PortValue":33680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69681598-663b-4e4f-9e06-2ba0e4151770","method":"POST","path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions","host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","object":"source:{address:{socket_address:{address:\"10.134.0.12:33680\" port_value:33680}}} destination:{address:{socket_address:{address:\"10.133.0.45:443\" port_value:443}}} request:{time:{seconds:1785446555 nanos:638707659} http:{id:\"69681598-663b-4e4f-9e06-2ba0e4151770\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-155c1d-kserve-workload-svc.ai-tenant-e2e-shared-a-155c1d.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.45~e2e-shared-a-155c1d-openshift-default-d7b6d7d7b-6q9fj.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"69681598-663b-4e4f-9e06-2ba0e4151770\"} path:\"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions\" host:\"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"84db9cfd042e9affbe6589efccf9f1386e1b3fe4a1673cfa55433769378dfaf8\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17jLfvla09bM6YcRm_oxosGdIGI2UFCGgw9516IBAFE96xe9CBNHEkEcsjaDw"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b163a3e3-1f71-444b-94af-d6391653eb59","keyName":"e2e-rate-a-dbe998","subscription":"e2e-rate-iso-a-dbe998","tenant":"e2e-shared-a-155c1d","userId":"b163a3e3-1f71-444b-94af-d6391653eb59","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-155c1d/models/facebook/opt-125m","name":"rate-test-model-155c1d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dbe998","namespace":"ai-tenant-e2e-shared-a-155c1d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d"}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-155c1d-kserve-workload-svc.ai-tenant-e2e-shared-a-155c1d.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.45~e2e-shared-a-155c1d-openshift-default-d7b6d7d7b-6q9fj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"69681598-663b-4e4f-9e06-2ba0e4151770"},"host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"69681598-663b-4e4f-9e06-2ba0e4151770","method":"POST","path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":638707659,"seconds":1785446555}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33680},"address":"10.134.0.12:33680"}}}}},"destination":{"address":"10.133.0.45:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"84db9cfd042e9affbe6589efccf9f1386e1b3fe4a1673cfa55433769378dfaf8"},"headers":{":authority":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-155c1d-kserve-workload-svc.ai-tenant-e2e-shared-a-155c1d.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.45~e2e-shared-a-155c1d-openshift-default-d7b6d7d7b-6q9fj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"69681598-663b-4e4f-9e06-2ba0e4151770"},"host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"69681598-663b-4e4f-9e06-2ba0e4151770","method":"POST","path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":638707659,"seconds":1785446555},"url_path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:33680","port":33680}}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-155c1d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dbe998"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b163a3e3-1f71-444b-94af-d6391653eb59","keyName":"e2e-rate-a-dbe998","selected_subscription":"e2e-rate-iso-a-dbe998","selected_subscription_key":"ai-tenant-e2e-shared-a-155c1d/e2e-rate-iso-a-dbe998@ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-155c1d/models/facebook/opt-125m","name":"rate-test-model-155c1d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dbe998","namespace":"ai-tenant-e2e-shared-a-155c1d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69681598-663b-4e4f-9e06-2ba0e4151770","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:33692","PortSpecifier":{"PortValue":33692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","method":"POST","path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions","host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","object":"source:{address:{socket_address:{address:\"10.134.0.12:33692\" port_value:33692}}} destination:{address:{socket_address:{address:\"10.133.0.45:443\" port_value:443}}} request:{time:{seconds:1785446556 nanos:678150023} http:{id:\"4909fdc1-85ad-424b-b1c8-c62f8386ae61\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-155c1d-kserve-workload-svc.ai-tenant-e2e-shared-a-155c1d.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.45~e2e-shared-a-155c1d-openshift-default-d7b6d7d7b-6q9fj.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"4909fdc1-85ad-424b-b1c8-c62f8386ae61\"} path:\"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions\" host:\"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"84db9cfd042e9affbe6589efccf9f1386e1b3fe4a1673cfa55433769378dfaf8\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17jLfvla09bM6YcRm_oxosGdIGI2UFCGgw9516IBAFE96xe9CBNHEkEcsjaDw"} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b163a3e3-1f71-444b-94af-d6391653eb59","keyName":"e2e-rate-a-dbe998","subscription":"e2e-rate-iso-a-dbe998","tenant":"e2e-shared-a-155c1d","userId":"b163a3e3-1f71-444b-94af-d6391653eb59","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-155c1d/models/facebook/opt-125m","name":"rate-test-model-155c1d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dbe998","namespace":"ai-tenant-e2e-shared-a-155c1d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d"}} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-155c1d-kserve-workload-svc.ai-tenant-e2e-shared-a-155c1d.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.45~e2e-shared-a-155c1d-openshift-default-d7b6d7d7b-6q9fj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61"},"host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","method":"POST","path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":678150023,"seconds":1785446556}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33692},"address":"10.134.0.12:33692"}}}}},"destination":{"address":"10.133.0.45:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"84db9cfd042e9affbe6589efccf9f1386e1b3fe4a1673cfa55433769378dfaf8"},"headers":{":authority":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-155c1d-kserve-workload-svc.ai-tenant-e2e-shared-a-155c1d.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.45~e2e-shared-a-155c1d-openshift-default-d7b6d7d7b-6q9fj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61"},"host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","method":"POST","path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":678150023,"seconds":1785446556},"url_path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:33692","port":33692}}} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-155c1d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dbe998"} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b163a3e3-1f71-444b-94af-d6391653eb59","keyName":"e2e-rate-a-dbe998","selected_subscription":"e2e-rate-iso-a-dbe998","selected_subscription_key":"ai-tenant-e2e-shared-a-155c1d/e2e-rate-iso-a-dbe998@ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-155c1d/models/facebook/opt-125m","name":"rate-test-model-155c1d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dbe998","namespace":"ai-tenant-e2e-shared-a-155c1d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:22:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4909fdc1-85ad-424b-b1c8-c62f8386ae61","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:33694","PortSpecifier":{"PortValue":33694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","method":"POST","path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions","host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","object":"source:{address:{socket_address:{address:\"10.134.0.12:33694\" port_value:33694}}} destination:{address:{socket_address:{address:\"10.133.0.45:443\" port_value:443}}} request:{time:{seconds:1785446557 nanos:728378759} http:{id:\"0f4cdd47-56ad-4275-95b9-1e475ee6ba33\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-155c1d-kserve-workload-svc.ai-tenant-e2e-shared-a-155c1d.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.45~e2e-shared-a-155c1d-openshift-default-d7b6d7d7b-6q9fj.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"0f4cdd47-56ad-4275-95b9-1e475ee6ba33\"} path:\"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions\" host:\"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"84db9cfd042e9affbe6589efccf9f1386e1b3fe4a1673cfa55433769378dfaf8\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17jLfvla09bM6YcRm_oxosGdIGI2UFCGgw9516IBAFE96xe9CBNHEkEcsjaDw"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b163a3e3-1f71-444b-94af-d6391653eb59","keyName":"e2e-rate-a-dbe998","subscription":"e2e-rate-iso-a-dbe998","tenant":"e2e-shared-a-155c1d","userId":"b163a3e3-1f71-444b-94af-d6391653eb59","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-155c1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-155c1d/models/facebook/opt-125m","name":"rate-test-model-155c1d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dbe998","namespace":"ai-tenant-e2e-shared-a-155c1d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d"}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-155c1d-kserve-workload-svc.ai-tenant-e2e-shared-a-155c1d.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xNTVjMWQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1hLTE1NWMxZC1vcGVuc2hpZnQtZGVmYXVsdC1kN2I2ZDdkN2ItNnE5ZmoKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWEtMTU1YzFkLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1hLTE1NWMxZC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.45~e2e-shared-a-155c1d-openshift-default-d7b6d7d7b-6q9fj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33"},"host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","method":"POST","path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":728378759,"seconds":1785446557}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33694},"address":"10.134.0.12:33694"}}}}},"destination":{"address":"10.133.0.45:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"84db9cfd042e9affbe6589efccf9f1386e1b3fe4a1673cfa55433769378dfaf8"},"headers":{":authority":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-155c1d-kserve-workload-svc.ai-tenant-e2e-shared-a-155c1d.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xNTVjMWQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1hLTE1NWMxZC1vcGVuc2hpZnQtZGVmYXVsdC1kN2I2ZDdkN2ItNnE5ZmoKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWEtMTU1YzFkLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1hLTE1NWMxZC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.45~e2e-shared-a-155c1d-openshift-default-d7b6d7d7b-6q9fj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33"},"host":"e2e-shared-a-155c1d.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","method":"POST","path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":728378759,"seconds":1785446557},"url_path":"/ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:33694","port":33694}}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-155c1d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dbe998"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b163a3e3-1f71-444b-94af-d6391653eb59","keyName":"e2e-rate-a-dbe998","selected_subscription":"e2e-rate-iso-a-dbe998","selected_subscription_key":"ai-tenant-e2e-shared-a-155c1d/e2e-rate-iso-a-dbe998@ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-155c1d/models/facebook/opt-125m","name":"rate-test-model-155c1d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dbe998","namespace":"ai-tenant-e2e-shared-a-155c1d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-155c1d/rate-test-model-155c1d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f4cdd47-56ad-4275-95b9-1e475ee6ba33","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:44792","PortSpecifier":{"PortValue":44792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0108afdc-91c4-4594-82e8-198d07da7c42","method":"POST","path":"/ai-tenant-e2e-shared-b-01bc1b/rate-test-model-01bc1b/v1/completions","host":"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","object":"source:{address:{socket_address:{address:\"10.134.0.12:44792\" port_value:44792}}} destination:{address:{socket_address:{address:\"10.133.0.46:443\" port_value:443}}} request:{time:{seconds:1785446557 nanos:776049569} http:{id:\"0108afdc-91c4-4594-82e8-198d07da7c42\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-01bc1b/rate-test-model-01bc1b/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-01bc1b-kserve-workload-svc.ai-tenant-e2e-shared-b-01bc1b.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.46~e2e-shared-b-01bc1b-openshift-default-65c6f59964-r2ssd.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"0108afdc-91c4-4594-82e8-198d07da7c42\"} path:\"/ai-tenant-e2e-shared-b-01bc1b/rate-test-model-01bc1b/v1/completions\" host:\"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-147E6WDzfqJVyYN0h_epKBvVLt3YwihIh6PPGG8uCBxHhk3uu0QSu8ak5biUv"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-01bc1b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-01bc1b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b35d825a-44ad-49dc-8da7-ce8b6949e6be","keyName":"e2e-rate-b-dbe998","subscription":"e2e-rate-iso-b-dbe998","tenant":"e2e-shared-b-01bc1b","userId":"b35d825a-44ad-49dc-8da7-ce8b6949e6be","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-01bc1b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-01bc1b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-01bc1b/models/facebook/opt-125m","name":"rate-test-model-01bc1b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-dbe998","namespace":"ai-tenant-e2e-shared-b-01bc1b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-01bc1b/rate-test-model-01bc1b"}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-01bc1b-kserve-workload-svc.ai-tenant-e2e-shared-b-01bc1b.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.46~e2e-shared-b-01bc1b-openshift-default-65c6f59964-r2ssd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0108afdc-91c4-4594-82e8-198d07da7c42"},"host":"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"0108afdc-91c4-4594-82e8-198d07da7c42","method":"POST","path":"/ai-tenant-e2e-shared-b-01bc1b/rate-test-model-01bc1b/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":776049569,"seconds":1785446557}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44792},"address":"10.134.0.12:44792"}}}}},"destination":{"address":"10.133.0.46:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287"},"headers":{":authority":"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-01bc1b/rate-test-model-01bc1b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-01bc1b-kserve-workload-svc.ai-tenant-e2e-shared-b-01bc1b.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.46~e2e-shared-b-01bc1b-openshift-default-65c6f59964-r2ssd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0108afdc-91c4-4594-82e8-198d07da7c42"},"host":"e2e-shared-b-01bc1b.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"0108afdc-91c4-4594-82e8-198d07da7c42","method":"POST","path":"/ai-tenant-e2e-shared-b-01bc1b/rate-test-model-01bc1b/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":776049569,"seconds":1785446557},"url_path":"/ai-tenant-e2e-shared-b-01bc1b/rate-test-model-01bc1b/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:44792","port":44792}}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01bc1b/rate-test-model-01bc1b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01bc1b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-dbe998"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b35d825a-44ad-49dc-8da7-ce8b6949e6be","keyName":"e2e-rate-b-dbe998","selected_subscription":"e2e-rate-iso-b-dbe998","selected_subscription_key":"ai-tenant-e2e-shared-b-01bc1b/e2e-rate-iso-b-dbe998@ai-tenant-e2e-shared-b-01bc1b/rate-test-model-01bc1b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-01bc1b/models/facebook/opt-125m","name":"rate-test-model-01bc1b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-dbe998","namespace":"ai-tenant-e2e-shared-b-01bc1b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-01bc1b/rate-test-model-01bc1b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:22:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0108afdc-91c4-4594-82e8-198d07da7c42","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0f957ca7a7913b5a9fe0eba93d0c0a8f2b72e468bd1fe92df1ebebbc5299a19"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9228a4882d0deaf9dc1e928a09e08534c0809b96b92febafbc207c3c142a7752"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e3fdb31e4025e17c2e27b4e22447dcbb6ccdab262c3ab81b10b446893551d51"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a36b096a29509591d167fd2d9051c38ecc799fb0ed559359c2f1a68307697f"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2a08e0f7d9f1e1a3721d4fea82f8f9275863a7ce04822bc5167b3d403809ed0"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d358c55a5d353cb1f5b57f43ae3517ee9a8295ae6171342e287fc8c2f39a40a4"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84db9cfd042e9affbe6589efccf9f1386e1b3fe4a1673cfa55433769378dfaf8"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/221966db44a243f9e4dc1440450c471167f9dd430049d9a4121f2d955dd46b5f"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5df45c4a610b208eece79c355db3a0460747f4800948722da4488833e0fce336"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/485188e2e9e419f24fbd8cbb31ebd8924c10237b5631bfd5a07aa9d85bb7162b"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca0f10cb79382c435260df7ea7f67880ee2e27124535d97869c8205eb82e2b13"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c6b6742fc4d6e5fb7015438fc71853cc17ee25e7db3411d01b3040f061449a3"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f241115ce6a87f6f907b7187da36d06e2c00b453c5ee8244d22ee36ebef55b2"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb97a2e3805ea372337f6de0c2bcc35674e716437c471bc4a7bd37d203d0b89a"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ceaf37f7079082c6ab3511690f2b78faf5e3eb11fcdf67e15ddd5ba23f37b1d"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ab2ca0c0ed8b8e86f8f2da859e596625f20769155e395c4686944ca17458287"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09251d3b61351c0dfd9e4ed20d457f9277cea5782234a390650c9b8cde458231"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/854ab9ac68c0e197d10666c3881b7eb47f3972145021288dbae2a689f3a13d58"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9ef736c029e0d8371bd9a130188b43fbe00d2f98cc00851fc0d9cf456825228"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e764d09de8e9908008b17a7a3977b471872d2505b58123efd487d01a40d35234"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42160b35ee79c8b6225109447c074d443992c37e50986a440a13343ca22fab7c"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83b86fe415f39e5cd2d4e7315fab8fd29b1011a0c52eb6d00b1a49e72884f931"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c78dd238384fd8117df7531f02f21de5f132e5a3eb55fc569f7f24e96e913d7e"} {"level":"info","ts":"2026-07-30T21:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2360a3033331dcc88f0879424b6777505269f9faf94e34eafc6d8228c92274d"} {"level":"info","ts":"2026-07-30T21:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f94ac52-910b-4785-9a38-8355c974a1f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:38454","PortSpecifier":{"PortValue":38454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.22:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f94ac52-910b-4785-9a38-8355c974a1f8","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f94ac52-910b-4785-9a38-8355c974a1f8","object":"source:{address:{socket_address:{address:\"10.134.0.12:38454\" port_value:38454}}} destination:{address:{socket_address:{address:\"10.133.0.22:443\" port_value:443}}} request:{time:{seconds:1785446645 nanos:951550322} http:{id:\"8f94ac52-910b-4785-9a38-8355c974a1f8\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.22~maas-default-gateway-openshift-default-78bb78ff78-w2tgm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"8f94ac52-910b-4785-9a38-8355c974a1f8\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:24:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f94ac52-910b-4785-9a38-8355c974a1f8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-30T21:24:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f94ac52-910b-4785-9a38-8355c974a1f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/73d7429660d2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=19b77a9e-e078-44f9-8e7a-970d3f81f3c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"16db301b-b48b-4663-b0c1-151a1a35116a","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-30T21:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f94ac52-910b-4785-9a38-8355c974a1f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/73d7429660d2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=19b77a9e-e078-44f9-8e7a-970d3f81f3c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"16db301b-b48b-4663-b0c1-151a1a35116a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.22:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.22~maas-default-gateway-openshift-default-78bb78ff78-w2tgm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8f94ac52-910b-4785-9a38-8355c974a1f8"},"host":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"8f94ac52-910b-4785-9a38-8355c974a1f8","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":951550322,"seconds":1785446645}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38454},"address":"10.134.0.12:38454"}}}}},"destination":{"address":"10.133.0.22:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.22~maas-default-gateway-openshift-default-78bb78ff78-w2tgm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8f94ac52-910b-4785-9a38-8355c974a1f8"},"host":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"8f94ac52-910b-4785-9a38-8355c974a1f8","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":951550322,"seconds":1785446645},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:38454","port":38454}}} {"level":"debug","ts":"2026-07-30T21:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f94ac52-910b-4785-9a38-8355c974a1f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f94ac52-910b-4785-9a38-8355c974a1f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f94ac52-910b-4785-9a38-8355c974a1f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f94ac52-910b-4785-9a38-8355c974a1f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-30T21:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f94ac52-910b-4785-9a38-8355c974a1f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f94ac52-910b-4785-9a38-8355c974a1f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-30T21:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f94ac52-910b-4785-9a38-8355c974a1f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f94ac52-910b-4785-9a38-8355c974a1f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:38466","PortSpecifier":{"PortValue":38466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.22:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","object":"source:{address:{socket_address:{address:\"10.134.0.12:38466\" port_value:38466}}} destination:{address:{socket_address:{address:\"10.133.0.22:443\" port_value:443}}} request:{time:{seconds:1785446646 nanos:3536088} http:{id:\"96ee206e-517b-492e-bd3e-2a8ce1eec60f\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXcydGdtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.22~maas-default-gateway-openshift-default-78bb78ff78-w2tgm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"96ee206e-517b-492e-bd3e-2a8ce1eec60f\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-34M7W5aVpoyDC0iu_i2MkBuako7s9UfAvRnPVvDB3XfLhcr2f9HqvQkXCGvY"} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2588529a-b7b0-42cb-8579-adc870cd9b98","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"2588529a-b7b0-42cb-8579-adc870cd9b98","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.22:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.22~maas-default-gateway-openshift-default-78bb78ff78-w2tgm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f"},"host":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":3536088,"seconds":1785446646}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38466},"address":"10.134.0.12:38466"}}}}},"destination":{"address":"10.133.0.22:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXcydGdtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.22~maas-default-gateway-openshift-default-78bb78ff78-w2tgm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f"},"host":"maas.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":3536088,"seconds":1785446646},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:38466","port":38466}}} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2588529a-b7b0-42cb-8579-adc870cd9b98","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:24:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96ee206e-517b-492e-bd3e-2a8ce1eec60f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105"} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105"} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105"} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105"} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105"} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa47066963fbebe93c03356df7d9179d3702773c98c86928f556af67936e5704","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa47066963fbebe93c03356df7d9179d3702773c98c86928f556af67936e5704","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa47066963fbebe93c03356df7d9179d3702773c98c86928f556af67936e5704","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa47066963fbebe93c03356df7d9179d3702773c98c86928f556af67936e5704"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa47066963fbebe93c03356df7d9179d3702773c98c86928f556af67936e5704","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa47066963fbebe93c03356df7d9179d3702773c98c86928f556af67936e5704","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa47066963fbebe93c03356df7d9179d3702773c98c86928f556af67936e5704"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa47066963fbebe93c03356df7d9179d3702773c98c86928f556af67936e5704","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa47066963fbebe93c03356df7d9179d3702773c98c86928f556af67936e5704"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa47066963fbebe93c03356df7d9179d3702773c98c86928f556af67936e5704","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac073fd4a02fd6581406ab437a5852b231e2173f9bea7ade3e0d4859e4bbd586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac073fd4a02fd6581406ab437a5852b231e2173f9bea7ade3e0d4859e4bbd586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa47066963fbebe93c03356df7d9179d3702773c98c86928f556af67936e5704"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac073fd4a02fd6581406ab437a5852b231e2173f9bea7ade3e0d4859e4bbd586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac073fd4a02fd6581406ab437a5852b231e2173f9bea7ade3e0d4859e4bbd586"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac073fd4a02fd6581406ab437a5852b231e2173f9bea7ade3e0d4859e4bbd586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac073fd4a02fd6581406ab437a5852b231e2173f9bea7ade3e0d4859e4bbd586"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac073fd4a02fd6581406ab437a5852b231e2173f9bea7ade3e0d4859e4bbd586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac073fd4a02fd6581406ab437a5852b231e2173f9bea7ade3e0d4859e4bbd586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac073fd4a02fd6581406ab437a5852b231e2173f9bea7ade3e0d4859e4bbd586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac073fd4a02fd6581406ab437a5852b231e2173f9bea7ade3e0d4859e4bbd586"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac073fd4a02fd6581406ab437a5852b231e2173f9bea7ade3e0d4859e4bbd586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47bd34da10f33a6614443f04119a9a1be1fdcaeb3c97d85a1358b6143f625cd7"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47bd34da10f33a6614443f04119a9a1be1fdcaeb3c97d85a1358b6143f625cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47bd34da10f33a6614443f04119a9a1be1fdcaeb3c97d85a1358b6143f625cd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47bd34da10f33a6614443f04119a9a1be1fdcaeb3c97d85a1358b6143f625cd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47bd34da10f33a6614443f04119a9a1be1fdcaeb3c97d85a1358b6143f625cd7"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e7f65de88474a01aa894d5e30740da35948ff75cf825ff42a18f7673371991"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47bd34da10f33a6614443f04119a9a1be1fdcaeb3c97d85a1358b6143f625cd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e7f65de88474a01aa894d5e30740da35948ff75cf825ff42a18f7673371991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e7f65de88474a01aa894d5e30740da35948ff75cf825ff42a18f7673371991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ab83dae352fc86cc1b45fc66abff9f6be12758013757cb7c681938ef124b221"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/184ea12f409ae68e0bdcd35a60d58cf5048c6d3c9a19db24165e2aac67c43732"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e7f65de88474a01aa894d5e30740da35948ff75cf825ff42a18f7673371991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ab83dae352fc86cc1b45fc66abff9f6be12758013757cb7c681938ef124b221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ab83dae352fc86cc1b45fc66abff9f6be12758013757cb7c681938ef124b221"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e7f65de88474a01aa894d5e30740da35948ff75cf825ff42a18f7673371991"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ab83dae352fc86cc1b45fc66abff9f6be12758013757cb7c681938ef124b221","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"184ea12f409ae68e0bdcd35a60d58cf5048c6d3c9a19db24165e2aac67c43732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["184ea12f409ae68e0bdcd35a60d58cf5048c6d3c9a19db24165e2aac67c43732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6638321c56a7d1ae4f1752e3dd8a9126b71c1cf56ef5f047c6eda096b937273"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ab83dae352fc86cc1b45fc66abff9f6be12758013757cb7c681938ef124b221"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"184ea12f409ae68e0bdcd35a60d58cf5048c6d3c9a19db24165e2aac67c43732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e7f65de88474a01aa894d5e30740da35948ff75cf825ff42a18f7673371991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6638321c56a7d1ae4f1752e3dd8a9126b71c1cf56ef5f047c6eda096b937273","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6638321c56a7d1ae4f1752e3dd8a9126b71c1cf56ef5f047c6eda096b937273"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/184ea12f409ae68e0bdcd35a60d58cf5048c6d3c9a19db24165e2aac67c43732"} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6638321c56a7d1ae4f1752e3dd8a9126b71c1cf56ef5f047c6eda096b937273","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ab83dae352fc86cc1b45fc66abff9f6be12758013757cb7c681938ef124b221","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"184ea12f409ae68e0bdcd35a60d58cf5048c6d3c9a19db24165e2aac67c43732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6638321c56a7d1ae4f1752e3dd8a9126b71c1cf56ef5f047c6eda096b937273","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6638321c56a7d1ae4f1752e3dd8a9126b71c1cf56ef5f047c6eda096b937273"} {"level":"info","ts":"2026-07-30T21:25:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"525524c1-517f-45b4-b380-8bbf7fec2afb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:55768","PortSpecifier":{"PortValue":55768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"525524c1-517f-45b4-b380-8bbf7fec2afb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:25:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"525524c1-517f-45b4-b380-8bbf7fec2afb","object":"source:{address:{socket_address:{address:\"10.134.0.12:55768\" port_value:55768}}} destination:{address:{socket_address:{address:\"10.133.0.47:443\" port_value:443}}} request:{time:{seconds:1785446704 nanos:344937376} http:{id:\"525524c1-517f-45b4-b380-8bbf7fec2afb\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-e54afd.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.47~e2e-ipp-a-e54afd-openshift-default-f8648f8d8-qpdh7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"525524c1-517f-45b4-b380-8bbf7fec2afb\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b5e7f65de88474a01aa894d5e30740da35948ff75cf825ff42a18f7673371991\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:25:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"525524c1-517f-45b4-b380-8bbf7fec2afb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-30T21:25:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"525524c1-517f-45b4-b380-8bbf7fec2afb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/73d7429660d2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=19b77a9e-e078-44f9-8e7a-970d3f81f3c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"16db301b-b48b-4663-b0c1-151a1a35116a","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-30T21:25:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"525524c1-517f-45b4-b380-8bbf7fec2afb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/73d7429660d2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=19b77a9e-e078-44f9-8e7a-970d3f81f3c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"16db301b-b48b-4663-b0c1-151a1a35116a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e7f65de88474a01aa894d5e30740da35948ff75cf825ff42a18f7673371991"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-e54afd.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-ipp-a-e54afd-openshift-default-f8648f8d8-qpdh7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"525524c1-517f-45b4-b380-8bbf7fec2afb"},"host":"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"525524c1-517f-45b4-b380-8bbf7fec2afb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":344937376,"seconds":1785446704}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55768},"address":"10.134.0.12:55768"}}}}},"destination":{"address":"10.133.0.47:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b5e7f65de88474a01aa894d5e30740da35948ff75cf825ff42a18f7673371991"},"headers":{":authority":"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-e54afd.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS1lNTRhZmQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CjwKBE5BTUUSNBoyZTJlLWlwcC1hLWU1NGFmZC1vcGVuc2hpZnQtZGVmYXVsdC1mODY0OGY4ZDgtcXBkaDcKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnAKBU9XTkVSEmcaZWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtaXBwLWEtZTU0YWZkLW9wZW5zaGlmdC1kZWZhdWx0CjUKDVdPUktMT0FEX05BTUUSJBoiZTJlLWlwcC1hLWU1NGFmZC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-ipp-a-e54afd-openshift-default-f8648f8d8-qpdh7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"525524c1-517f-45b4-b380-8bbf7fec2afb"},"host":"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"525524c1-517f-45b4-b380-8bbf7fec2afb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":344937376,"seconds":1785446704},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:55768","port":55768}}} {"level":"debug","ts":"2026-07-30T21:25:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"525524c1-517f-45b4-b380-8bbf7fec2afb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:25:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"525524c1-517f-45b4-b380-8bbf7fec2afb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:25:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"525524c1-517f-45b4-b380-8bbf7fec2afb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-e54afd/ipp-route-e54afd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-e54afd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:25:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"525524c1-517f-45b4-b380-8bbf7fec2afb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-30T21:25:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"525524c1-517f-45b4-b380-8bbf7fec2afb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:25:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"525524c1-517f-45b4-b380-8bbf7fec2afb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-30T21:25:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"525524c1-517f-45b4-b380-8bbf7fec2afb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:25:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"525524c1-517f-45b4-b380-8bbf7fec2afb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:55776","PortSpecifier":{"PortValue":55776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e3bd582-818f-4b86-9bef-49451f0bf091","method":"POST","path":"/ai-tenant-e2e-ipp-a-e54afd/ipp-route-e54afd/v1/chat/completions","host":"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","object":"source:{address:{socket_address:{address:\"10.134.0.12:55776\" port_value:55776}}} destination:{address:{socket_address:{address:\"10.133.0.47:443\" port_value:443}}} request:{time:{seconds:1785446706 nanos:408736216} http:{id:\"5e3bd582-818f-4b86-9bef-49451f0bf091\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-e54afd/ipp-route-e54afd/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-e54afd-kserve-workload-svc.ai-tenant-e2e-ipp-a-e54afd.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.47~e2e-ipp-a-e54afd-openshift-default-f8648f8d8-qpdh7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"5e3bd582-818f-4b86-9bef-49451f0bf091\"} path:\"/ai-tenant-e2e-ipp-a-e54afd/ipp-route-e54afd/v1/chat/completions\" host:\"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NaLAqdIKd2fbXN6F_U5aGPS2Raf4BhWkSMV81YJhnFT6sbuSCAGfszyw7Kk3"} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-e54afd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-e54afd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"10b72b25-095d-4878-915a-468da3a838e7","keyName":"e2e-ipp-e54afd","subscription":"ipp-route-e54afd-sub","tenant":"e2e-ipp-a-e54afd","userId":"10b72b25-095d-4878-915a-468da3a838e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-e54afd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-e54afd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-e54afd/models/facebook/opt-125m","name":"ipp-route-e54afd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-e54afd-sub","namespace":"ai-tenant-e2e-ipp-a-e54afd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-e54afd/ipp-route-e54afd"}} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-e54afd-kserve-workload-svc.ai-tenant-e2e-ipp-a-e54afd.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS1lNTRhZmQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CjwKBE5BTUUSNBoyZTJlLWlwcC1hLWU1NGFmZC1vcGVuc2hpZnQtZGVmYXVsdC1mODY0OGY4ZDgtcXBkaDcKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnAKBU9XTkVSEmcaZWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtaXBwLWEtZTU0YWZkLW9wZW5zaGlmdC1kZWZhdWx0CjUKDVdPUktMT0FEX05BTUUSJBoiZTJlLWlwcC1hLWU1NGFmZC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-ipp-a-e54afd-openshift-default-f8648f8d8-qpdh7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5e3bd582-818f-4b86-9bef-49451f0bf091"},"host":"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"5e3bd582-818f-4b86-9bef-49451f0bf091","method":"POST","path":"/ai-tenant-e2e-ipp-a-e54afd/ipp-route-e54afd/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":408736216,"seconds":1785446706}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55776},"address":"10.134.0.12:55776"}}}}},"destination":{"address":"10.133.0.47:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105"},"headers":{":authority":"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-e54afd/ipp-route-e54afd/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-e54afd-kserve-workload-svc.ai-tenant-e2e-ipp-a-e54afd.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-ipp-a-e54afd-openshift-default-f8648f8d8-qpdh7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.12","x-forwarded-host":"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5e3bd582-818f-4b86-9bef-49451f0bf091"},"host":"e2e-ipp-a-e54afd.apps.5d55e737-f1ae-4316-83ca-73d7429660d2.prod.konfluxeaas.com","id":"5e3bd582-818f-4b86-9bef-49451f0bf091","method":"POST","path":"/ai-tenant-e2e-ipp-a-e54afd/ipp-route-e54afd/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":408736216,"seconds":1785446706},"url_path":"/ai-tenant-e2e-ipp-a-e54afd/ipp-route-e54afd/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.12:55776","port":55776}}} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-e54afd/ipp-route-e54afd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-e54afd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-e54afd-sub"} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"10b72b25-095d-4878-915a-468da3a838e7","keyName":"e2e-ipp-e54afd","selected_subscription":"ipp-route-e54afd-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-e54afd/ipp-route-e54afd-sub@ai-tenant-e2e-ipp-a-e54afd/ipp-route-e54afd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-e54afd/models/facebook/opt-125m","name":"ipp-route-e54afd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-e54afd-sub","namespace":"ai-tenant-e2e-ipp-a-e54afd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-e54afd/ipp-route-e54afd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:25:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e3bd582-818f-4b86-9bef-49451f0bf091","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:26:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/184ea12f409ae68e0bdcd35a60d58cf5048c6d3c9a19db24165e2aac67c43732"} {"level":"info","ts":"2026-07-30T21:26:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa47066963fbebe93c03356df7d9179d3702773c98c86928f556af67936e5704"} {"level":"info","ts":"2026-07-30T21:26:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6638321c56a7d1ae4f1752e3dd8a9126b71c1cf56ef5f047c6eda096b937273"} {"level":"info","ts":"2026-07-30T21:26:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ab83dae352fc86cc1b45fc66abff9f6be12758013757cb7c681938ef124b221"} {"level":"info","ts":"2026-07-30T21:26:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fa728840d01b07bf7ca3d81741b36d62a5ed1a77c3852ccd31f3b4747658542"} {"level":"info","ts":"2026-07-30T21:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68c3fbc56da1c481441162dd315e556a400269c7ca914e0cb90aabbbf9319105"} {"level":"info","ts":"2026-07-30T21:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac073fd4a02fd6581406ab437a5852b231e2173f9bea7ade3e0d4859e4bbd586"} {"level":"info","ts":"2026-07-30T21:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33286ecd33564efde4b19f85ad9a78121e7583a84e4cd202823485c8311ef256"} {"level":"info","ts":"2026-07-30T21:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e3d6b9cba8affafa12273fca21c704f2aa5d751e6fd8e3a7838afa712535cbb"} {"level":"info","ts":"2026-07-30T21:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47bd34da10f33a6614443f04119a9a1be1fdcaeb3c97d85a1358b6143f625cd7"} {"level":"info","ts":"2026-07-30T21:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0ff743f3b339a6fd27a6b5243ef6d4667b82055e7fd508b54057a51a382ce9e"} {"level":"info","ts":"2026-07-30T21:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5e7f65de88474a01aa894d5e30740da35948ff75cf825ff42a18f7673371991"}