{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"error","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"}
{"level":"info","ts":"2026-07-09T19:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"debug","ts":"2026-07-09T19:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"}
{"level":"error","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"error","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T19:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T19:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d"}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21"}
{"level":"debug","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"}
{"level":"info","ts":"2026-07-09T19:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"}
{"level":"info","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50248","PortSpecifier":{"PortValue":50248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50248","PortSpecifier":{"PortValue":50248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625593,"nanos":852395246},"http":{"id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e496c50-46e1-4cda-8833-5ffedbb9a92f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56870","PortSpecifier":{"PortValue":56870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6098b6fe-7efa-4660-8c87-17beca598d4f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56870","PortSpecifier":{"PortValue":56870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625593,"nanos":899858695},"http":{"id":"6098b6fe-7efa-4660-8c87-17beca598d4f","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6098b6fe-7efa-4660-8c87-17beca598d4f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50250","PortSpecifier":{"PortValue":50250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f64d97d-f489-431d-906b-20279d2e5bc2","method":"POST","path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50250","PortSpecifier":{"PortValue":50250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625593,"nanos":946636394},"http":{"id":"4f64d97d-f489-431d-906b-20279d2e5bc2","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QBFrb1KP5dy7xYBF_7zkWUcf8yC2SD7RjEBh3b4joIfdywOKjPTpwZXT3cvL"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QBFrb1KP5dy7xYBF_7zkWUcf8yC2SD7RjEBh3b4joIfdywOKjPTpwZXT3cvL\"}"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","keyName":"e2e-rate-a-33aef7","subscription":"e2e-rate-iso-a-33aef7","tenant":"e2e-shared-a-5d8f8f","userId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-33aef7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33aef7","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-33aef7"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","keyName":"e2e-rate-a-33aef7","selected_subscription":"e2e-rate-iso-a-33aef7","selected_subscription_key":"ai-tenant-e2e-shared-a-5d8f8f/e2e-rate-iso-a-33aef7@ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33aef7","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f64d97d-f489-431d-906b-20279d2e5bc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50258","PortSpecifier":{"PortValue":50258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","method":"POST","path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50258","PortSpecifier":{"PortValue":50258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625595,"nanos":10471348},"http":{"id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QBFrb1KP5dy7xYBF_7zkWUcf8yC2SD7RjEBh3b4joIfdywOKjPTpwZXT3cvL"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QBFrb1KP5dy7xYBF_7zkWUcf8yC2SD7RjEBh3b4joIfdywOKjPTpwZXT3cvL\"}"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","keyName":"e2e-rate-a-33aef7","subscription":"e2e-rate-iso-a-33aef7","tenant":"e2e-shared-a-5d8f8f","userId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-33aef7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33aef7","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-33aef7"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","keyName":"e2e-rate-a-33aef7","selected_subscription":"e2e-rate-iso-a-33aef7","selected_subscription_key":"ai-tenant-e2e-shared-a-5d8f8f/e2e-rate-iso-a-33aef7@ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33aef7","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaf4b823-714a-4e6f-9e7d-91dc43b2c032","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50272","PortSpecifier":{"PortValue":50272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","method":"POST","path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50272","PortSpecifier":{"PortValue":50272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625596,"nanos":52272136},"http":{"id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QBFrb1KP5dy7xYBF_7zkWUcf8yC2SD7RjEBh3b4joIfdywOKjPTpwZXT3cvL"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QBFrb1KP5dy7xYBF_7zkWUcf8yC2SD7RjEBh3b4joIfdywOKjPTpwZXT3cvL\"}"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","keyName":"e2e-rate-a-33aef7","subscription":"e2e-rate-iso-a-33aef7","tenant":"e2e-shared-a-5d8f8f","userId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-33aef7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33aef7","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-33aef7"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da9492c0-e0d1-40b0-b918-46b770ef27a7","keyName":"e2e-rate-a-33aef7","selected_subscription":"e2e-rate-iso-a-33aef7","selected_subscription_key":"ai-tenant-e2e-shared-a-5d8f8f/e2e-rate-iso-a-33aef7@ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-33aef7","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2feccc63-6f7f-444c-85cb-1bef7323f42d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58714","PortSpecifier":{"PortValue":58714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"188008db-6be0-4a46-81b3-a2a73d5caeef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58714","PortSpecifier":{"PortValue":58714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625609,"nanos":1105220},"http":{"id":"188008db-6be0-4a46-81b3-a2a73d5caeef","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"188008db-6be0-4a46-81b3-a2a73d5caeef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42030","PortSpecifier":{"PortValue":42030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42030","PortSpecifier":{"PortValue":42030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625609,"nanos":44092840},"http":{"id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"]}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c7dce7b7002"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3884ebc0-ab94-4bcc-87f6-ae4e03c54e3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a56eb008-cda2-456a-a04e-1a2fff1a4ae3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8705a423-67f5-4ecf-a05c-33215b52a0c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58730","PortSpecifier":{"PortValue":58730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","method":"POST","path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58730","PortSpecifier":{"PortValue":58730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625609,"nanos":82538824},"http":{"id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ygtkkquJxQIVR4qE_1O5r6LcAH0wyYfXn7ONqkFVHuZIkrH7xIPPCvNEZhzV"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ygtkkquJxQIVR4qE_1O5r6LcAH0wyYfXn7ONqkFVHuZIkrH7xIPPCvNEZhzV\"}"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f0c9be83-43cc-4585-bd94-798327a507bb","keyName":"e2e-rate-a-56f4c8","subscription":"e2e-rate-iso-a-56f4c8","tenant":"e2e-shared-a-5d8f8f","userId":"f0c9be83-43cc-4585-bd94-798327a507bb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-56f4c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56f4c8","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-56f4c8"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f0c9be83-43cc-4585-bd94-798327a507bb","keyName":"e2e-rate-a-56f4c8","selected_subscription":"e2e-rate-iso-a-56f4c8","selected_subscription_key":"ai-tenant-e2e-shared-a-5d8f8f/e2e-rate-iso-a-56f4c8@ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56f4c8","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88ab1d66-33c1-4080-9c55-3e594b9278fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58746","PortSpecifier":{"PortValue":58746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","method":"POST","path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58746","PortSpecifier":{"PortValue":58746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625610,"nanos":119461763},"http":{"id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ygtkkquJxQIVR4qE_1O5r6LcAH0wyYfXn7ONqkFVHuZIkrH7xIPPCvNEZhzV"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ygtkkquJxQIVR4qE_1O5r6LcAH0wyYfXn7ONqkFVHuZIkrH7xIPPCvNEZhzV\"}"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f0c9be83-43cc-4585-bd94-798327a507bb","keyName":"e2e-rate-a-56f4c8","subscription":"e2e-rate-iso-a-56f4c8","tenant":"e2e-shared-a-5d8f8f","userId":"f0c9be83-43cc-4585-bd94-798327a507bb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-56f4c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56f4c8","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-56f4c8"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f0c9be83-43cc-4585-bd94-798327a507bb","keyName":"e2e-rate-a-56f4c8","selected_subscription":"e2e-rate-iso-a-56f4c8","selected_subscription_key":"ai-tenant-e2e-shared-a-5d8f8f/e2e-rate-iso-a-56f4c8@ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56f4c8","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"512ebb28-f472-4fcb-a275-d07ce43fdfaa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58754","PortSpecifier":{"PortValue":58754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ec17753-6aa3-4548-8919-8320c5fff78d","method":"POST","path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions","host":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58754","PortSpecifier":{"PortValue":58754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625611,"nanos":158455975},"http":{"id":"1ec17753-6aa3-4548-8919-8320c5fff78d","method":"POST","headers":{":authority":"e2e-shared-a-5d8f8f.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ygtkkquJxQIVR4qE_1O5r6LcAH0wyYfXn7ONqkFVHuZIkrH7xIPPCvNEZhzV"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ygtkkquJxQIVR4qE_1O5r6LcAH0wyYfXn7ONqkFVHuZIkrH7xIPPCvNEZhzV\"}"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f0c9be83-43cc-4585-bd94-798327a507bb","keyName":"e2e-rate-a-56f4c8","subscription":"e2e-rate-iso-a-56f4c8","tenant":"e2e-shared-a-5d8f8f","userId":"f0c9be83-43cc-4585-bd94-798327a507bb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-56f4c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5d8f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56f4c8","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-56f4c8"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f0c9be83-43cc-4585-bd94-798327a507bb","keyName":"e2e-rate-a-56f4c8","selected_subscription":"e2e-rate-iso-a-56f4c8","selected_subscription_key":"ai-tenant-e2e-shared-a-5d8f8f/e2e-rate-iso-a-56f4c8@ai-tenant-e2e-shared-a-5d8f8f/rate-test-model-5d8f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5d8f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56f4c8","namespace":"ai-tenant-e2e-shared-a-5d8f8f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ec17753-6aa3-4548-8919-8320c5fff78d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42038","PortSpecifier":{"PortValue":42038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","method":"POST","path":"/ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51/v1/completions","host":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42038","PortSpecifier":{"PortValue":42038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783625611,"nanos":194277631},"http":{"id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","method":"POST","headers":{":authority":"e2e-shared-b-b20a51.apps.be731685-4e41-4e13-a5ac-3c7dce7b7002.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4B1ol5FIxqZ1lrJt_7urfmbNkkY05jNumxtUpOxqD6tex8cX5u5s2yR6ZpZq"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4B1ol5FIxqZ1lrJt_7urfmbNkkY05jNumxtUpOxqD6tex8cX5u5s2yR6ZpZq\"}"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91434548-cf29-4afc-a4a8-639167135b27","keyName":"e2e-rate-b-56f4c8","subscription":"e2e-rate-iso-b-56f4c8","tenant":"e2e-shared-b-b20a51","userId":"91434548-cf29-4afc-a4a8-639167135b27","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51\",\"requestedSubscription\":\"e2e-rate-iso-b-56f4c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b20a51.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b20a51","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-56f4c8","namespace":"ai-tenant-e2e-shared-b-b20a51","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-56f4c8"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"91434548-cf29-4afc-a4a8-639167135b27","keyName":"e2e-rate-b-56f4c8","selected_subscription":"e2e-rate-iso-b-56f4c8","selected_subscription_key":"ai-tenant-e2e-shared-b-b20a51/e2e-rate-iso-b-56f4c8@ai-tenant-e2e-shared-b-b20a51/rate-test-model-b20a51","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b20a51","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-56f4c8","namespace":"ai-tenant-e2e-shared-b-b20a51","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T19:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19006dc3-ff8e-45ca-9d0f-084177ea618c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T19:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f64504273245609f56d4ad3d00bbba8f07d582b257d8562997f0341dc706ef1b"}
{"level":"info","ts":"2026-07-09T19:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8d83afc8e400cecb0ae155262b2da0d39cf6429d700540903ad071229f728af"}
{"level":"info","ts":"2026-07-09T19:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c268c63669a0de5da78f77e1b89a2c9774dc33e6d652e3e9e1a7518352e109e3"}
{"level":"info","ts":"2026-07-09T19:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a02a39f5cbaf2d8c43e115041ab9c3bad2f7d8576d1437026a2753ff25d92734"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25ffb8496a940bd84f4b571716dc4bd47f07278fcd00a843247b6532f5de1bc1"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/362ddf247981899b6d5cf660a67a2898b2acecf72077c47b6056b6e138194126"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d675d19490942c427b4f87a4f3d883a192f8ee77c46205fbbd20d02735de119"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b6f8326cbfbc70c84779337db257a9ca70d26f7848af7e3ef455fa69ec76ea3"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8309f566e258e984ce9641577bd0970fc7a737e6596f6dc95d64bdea75adbd21"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/603ce9e706a4d4c3e0241d7edb278b9a042561f7cc871dba86ce03c1d180c8c5"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c485179d0f995e1fefc550da4f9bb36e26ba03bd494a9cb73779b4090233e77"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0f367bb07d1e3c8d8e8a56264bfa084fdc60ed79188e3f9b6583e53605d6c1f"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8c341855ee2f3bc5b4bd8f8fa885d357c20b11ba90c24020e132e06a9974519"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/227afbef4fbbe01429f2b9089dd95c0ab7650ac94ebd0f95b051d899a7868314"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8974017ea895a93c12df4d13252d0763660616373e4599f33ebef4fb4fbfd25d"}
{"level":"info","ts":"2026-07-09T19:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f5dae7bdedce6d5737fbe9ff2fba61f69f3bdd56ec4dafc74c267d9e187e8ac"}
{"level":"info","ts":"2026-07-09T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85537e60c04114b0d2f1f08533a5454d6d89576848aed8af34ac78ae042542fd"}
{"level":"info","ts":"2026-07-09T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec153549ae492eb0089387586298a84492e932106a82bcf1a76dd8295e0b473f"}
{"level":"info","ts":"2026-07-09T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5eb2a9d3813086de86f6c30c5038293777cbaf6917e2c07daf90c0b1cb94651"}
{"level":"info","ts":"2026-07-09T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83a67a300c3cdd5b0905ae10f18a4adcfcb600d27d8dd4db04b7fde25fa7c48b"}
{"level":"info","ts":"2026-07-09T19:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27e4db5de21e36b081a9bd46b90c480f31b02d5b7c6e38c09c573b94dbbc11d2"}
{"level":"info","ts":"2026-07-09T19:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a06b5d462fc84e34ec83a53ba16e7b8566437469b16ab0bc1cbd1f2da7ebb7"}
{"level":"info","ts":"2026-07-09T19:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc5a7fdeb934431c4c2d4cfca82babdd38f62271d7b69b78870d6f953e63096c"}
{"level":"info","ts":"2026-07-09T19:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/004da7c97982a4df4fdbe687a4a3c7224579bab02b2c7b6197959a26bc234e76"}