{"level":"debug","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a3eb51d6d34d773df5b5c16046c415d5981b696b56258460591df815abb721b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a3eb51d6d34d773df5b5c16046c415d5981b696b56258460591df815abb721b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156"} {"level":"info","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a3eb51d6d34d773df5b5c16046c415d5981b696b56258460591df815abb721b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a3eb51d6d34d773df5b5c16046c415d5981b696b56258460591df815abb721b"} {"level":"info","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a3eb51d6d34d773df5b5c16046c415d5981b696b56258460591df815abb721b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156"} {"level":"debug","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a3eb51d6d34d773df5b5c16046c415d5981b696b56258460591df815abb721b"} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156"} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a259c90526b714af9ed872baa8fa896b8a7eb6b22a567856cff62ea50364a03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a259c90526b714af9ed872baa8fa896b8a7eb6b22a567856cff62ea50364a03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a259c90526b714af9ed872baa8fa896b8a7eb6b22a567856cff62ea50364a03"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a259c90526b714af9ed872baa8fa896b8a7eb6b22a567856cff62ea50364a03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a259c90526b714af9ed872baa8fa896b8a7eb6b22a567856cff62ea50364a03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a259c90526b714af9ed872baa8fa896b8a7eb6b22a567856cff62ea50364a03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a259c90526b714af9ed872baa8fa896b8a7eb6b22a567856cff62ea50364a03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65d6e05ebf27ec836ecc5edb4149c60b10bb0fbf32c188feee44b18676643cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a259c90526b714af9ed872baa8fa896b8a7eb6b22a567856cff62ea50364a03"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65d6e05ebf27ec836ecc5edb4149c60b10bb0fbf32c188feee44b18676643cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92277370011b7a2e9dbc3dfe10ffe353fd68563e281381bc3bcfb7ff19aef878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92277370011b7a2e9dbc3dfe10ffe353fd68563e281381bc3bcfb7ff19aef878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65d6e05ebf27ec836ecc5edb4149c60b10bb0fbf32c188feee44b18676643cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65d6e05ebf27ec836ecc5edb4149c60b10bb0fbf32c188feee44b18676643cbe"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92277370011b7a2e9dbc3dfe10ffe353fd68563e281381bc3bcfb7ff19aef878"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65d6e05ebf27ec836ecc5edb4149c60b10bb0fbf32c188feee44b18676643cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92277370011b7a2e9dbc3dfe10ffe353fd68563e281381bc3bcfb7ff19aef878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92277370011b7a2e9dbc3dfe10ffe353fd68563e281381bc3bcfb7ff19aef878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65d6e05ebf27ec836ecc5edb4149c60b10bb0fbf32c188feee44b18676643cbe"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92277370011b7a2e9dbc3dfe10ffe353fd68563e281381bc3bcfb7ff19aef878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92277370011b7a2e9dbc3dfe10ffe353fd68563e281381bc3bcfb7ff19aef878"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65d6e05ebf27ec836ecc5edb4149c60b10bb0fbf32c188feee44b18676643cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65d6e05ebf27ec836ecc5edb4149c60b10bb0fbf32c188feee44b18676643cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65d6e05ebf27ec836ecc5edb4149c60b10bb0fbf32c188feee44b18676643cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65d6e05ebf27ec836ecc5edb4149c60b10bb0fbf32c188feee44b18676643cbe"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92277370011b7a2e9dbc3dfe10ffe353fd68563e281381bc3bcfb7ff19aef878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65d6e05ebf27ec836ecc5edb4149c60b10bb0fbf32c188feee44b18676643cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"} {"level":"info","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d298effc-3062-4b22-97c8-927dbbc8d8af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54930","PortSpecifier":{"PortValue":54930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d298effc-3062-4b22-97c8-927dbbc8d8af","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6eef04.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d298effc-3062-4b22-97c8-927dbbc8d8af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54930","PortSpecifier":{"PortValue":54930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301343,"nanos":817131927},"http":{"id":"d298effc-3062-4b22-97c8-927dbbc8d8af","method":"POST","headers":{":authority":"e2e-shared-a-6eef04.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d298effc-3062-4b22-97c8-927dbbc8d8af","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d298effc-3062-4b22-97c8-927dbbc8d8af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5785f8b4-6dbc-465a-9722-274730f8bee6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b68146b-955c-4b33-98ba-1820ad7ccab4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1997244e2d19"]}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d298effc-3062-4b22-97c8-927dbbc8d8af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1997244e2d19"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b68146b-955c-4b33-98ba-1820ad7ccab4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5785f8b4-6dbc-465a-9722-274730f8bee6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"475242150ec43945969b4226bbf087858c72a3b2b24fa38e9b8dc9c929e0730d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6eef04.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d298effc-3062-4b22-97c8-927dbbc8d8af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d298effc-3062-4b22-97c8-927dbbc8d8af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d298effc-3062-4b22-97c8-927dbbc8d8af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6eef04/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d298effc-3062-4b22-97c8-927dbbc8d8af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d298effc-3062-4b22-97c8-927dbbc8d8af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d298effc-3062-4b22-97c8-927dbbc8d8af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d298effc-3062-4b22-97c8-927dbbc8d8af","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d298effc-3062-4b22-97c8-927dbbc8d8af","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06493d68-77f9-4d7b-9eac-20af461559e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36404","PortSpecifier":{"PortValue":36404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06493d68-77f9-4d7b-9eac-20af461559e8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-be8bc5.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06493d68-77f9-4d7b-9eac-20af461559e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36404","PortSpecifier":{"PortValue":36404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301343,"nanos":851555626},"http":{"id":"06493d68-77f9-4d7b-9eac-20af461559e8","method":"POST","headers":{":authority":"e2e-shared-b-be8bc5.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06493d68-77f9-4d7b-9eac-20af461559e8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06493d68-77f9-4d7b-9eac-20af461559e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5785f8b4-6dbc-465a-9722-274730f8bee6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b68146b-955c-4b33-98ba-1820ad7ccab4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1997244e2d19"]}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06493d68-77f9-4d7b-9eac-20af461559e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1997244e2d19"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b68146b-955c-4b33-98ba-1820ad7ccab4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5785f8b4-6dbc-465a-9722-274730f8bee6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-be8bc5.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06493d68-77f9-4d7b-9eac-20af461559e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06493d68-77f9-4d7b-9eac-20af461559e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06493d68-77f9-4d7b-9eac-20af461559e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-be8bc5/rate-test-model-be8bc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-be8bc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06493d68-77f9-4d7b-9eac-20af461559e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06493d68-77f9-4d7b-9eac-20af461559e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06493d68-77f9-4d7b-9eac-20af461559e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06493d68-77f9-4d7b-9eac-20af461559e8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06493d68-77f9-4d7b-9eac-20af461559e8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54942","PortSpecifier":{"PortValue":54942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28dec74c-3009-4042-acf1-df55440ee4fa","method":"POST","path":"/ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04/v1/completions","host":"e2e-shared-a-6eef04.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54942","PortSpecifier":{"PortValue":54942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301343,"nanos":886530539},"http":{"id":"28dec74c-3009-4042-acf1-df55440ee4fa","method":"POST","headers":{":authority":"e2e-shared-a-6eef04.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SonGYcPy9SERqHJS_tLEkeOGVquttc3ScCeNqdLNBN2VV447PZN1oz3kgU3C"} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6eef04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SonGYcPy9SERqHJS_tLEkeOGVquttc3ScCeNqdLNBN2VV447PZN1oz3kgU3C\"}"} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6eef04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a87823e-4ed4-4d5d-8b1a-dfb909408972","keyName":"e2e-rate-a-7128d0","subscription":"e2e-rate-iso-a-7128d0","tenant":"e2e-shared-a-6eef04","userId":"7a87823e-4ed4-4d5d-8b1a-dfb909408972","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6eef04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04\",\"requestedSubscription\":\"e2e-rate-iso-a-7128d0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6eef04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6eef04/models/facebook/opt-125m","name":"rate-test-model-6eef04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7128d0","namespace":"ai-tenant-e2e-shared-a-6eef04","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04"}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6eef04/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7128d0"} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7a87823e-4ed4-4d5d-8b1a-dfb909408972","keyName":"e2e-rate-a-7128d0","selected_subscription":"e2e-rate-iso-a-7128d0","selected_subscription_key":"ai-tenant-e2e-shared-a-6eef04/e2e-rate-iso-a-7128d0@ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6eef04/models/facebook/opt-125m","name":"rate-test-model-6eef04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7128d0","namespace":"ai-tenant-e2e-shared-a-6eef04","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T05:02:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28dec74c-3009-4042-acf1-df55440ee4fa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54956","PortSpecifier":{"PortValue":54956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","method":"POST","path":"/ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04/v1/completions","host":"e2e-shared-a-6eef04.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54956","PortSpecifier":{"PortValue":54956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301344,"nanos":931373975},"http":{"id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","method":"POST","headers":{":authority":"e2e-shared-a-6eef04.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SonGYcPy9SERqHJS_tLEkeOGVquttc3ScCeNqdLNBN2VV447PZN1oz3kgU3C"} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6eef04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SonGYcPy9SERqHJS_tLEkeOGVquttc3ScCeNqdLNBN2VV447PZN1oz3kgU3C\"}"} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6eef04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a87823e-4ed4-4d5d-8b1a-dfb909408972","keyName":"e2e-rate-a-7128d0","subscription":"e2e-rate-iso-a-7128d0","tenant":"e2e-shared-a-6eef04","userId":"7a87823e-4ed4-4d5d-8b1a-dfb909408972","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6eef04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04\",\"requestedSubscription\":\"e2e-rate-iso-a-7128d0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6eef04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6eef04/models/facebook/opt-125m","name":"rate-test-model-6eef04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7128d0","namespace":"ai-tenant-e2e-shared-a-6eef04","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04"}} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6eef04/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7128d0"} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7a87823e-4ed4-4d5d-8b1a-dfb909408972","keyName":"e2e-rate-a-7128d0","selected_subscription":"e2e-rate-iso-a-7128d0","selected_subscription_key":"ai-tenant-e2e-shared-a-6eef04/e2e-rate-iso-a-7128d0@ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6eef04/models/facebook/opt-125m","name":"rate-test-model-6eef04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7128d0","namespace":"ai-tenant-e2e-shared-a-6eef04","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T05:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8c2ad10-6b3a-4e2f-98fa-ae671d717351","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54964","PortSpecifier":{"PortValue":54964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","method":"POST","path":"/ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04/v1/completions","host":"e2e-shared-a-6eef04.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54964","PortSpecifier":{"PortValue":54964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301345,"nanos":971212382},"http":{"id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","method":"POST","headers":{":authority":"e2e-shared-a-6eef04.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SonGYcPy9SERqHJS_tLEkeOGVquttc3ScCeNqdLNBN2VV447PZN1oz3kgU3C"} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6eef04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SonGYcPy9SERqHJS_tLEkeOGVquttc3ScCeNqdLNBN2VV447PZN1oz3kgU3C\"}"} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6eef04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a87823e-4ed4-4d5d-8b1a-dfb909408972","keyName":"e2e-rate-a-7128d0","subscription":"e2e-rate-iso-a-7128d0","tenant":"e2e-shared-a-6eef04","userId":"7a87823e-4ed4-4d5d-8b1a-dfb909408972","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6eef04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04\",\"requestedSubscription\":\"e2e-rate-iso-a-7128d0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6eef04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6eef04/models/facebook/opt-125m","name":"rate-test-model-6eef04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7128d0","namespace":"ai-tenant-e2e-shared-a-6eef04","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04"}} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6eef04/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7128d0"} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7a87823e-4ed4-4d5d-8b1a-dfb909408972","keyName":"e2e-rate-a-7128d0","selected_subscription":"e2e-rate-iso-a-7128d0","selected_subscription_key":"ai-tenant-e2e-shared-a-6eef04/e2e-rate-iso-a-7128d0@ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6eef04/models/facebook/opt-125m","name":"rate-test-model-6eef04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7128d0","namespace":"ai-tenant-e2e-shared-a-6eef04","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6eef04/rate-test-model-6eef04"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T05:02:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e4ba2cf-f380-4db2-bb4b-da26982393bc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36416","PortSpecifier":{"PortValue":36416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"000f1139-89b4-4f1e-89df-80dde1d944a6","method":"POST","path":"/ai-tenant-e2e-shared-b-be8bc5/rate-test-model-be8bc5/v1/completions","host":"e2e-shared-b-be8bc5.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36416","PortSpecifier":{"PortValue":36416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301346,"nanos":6461074},"http":{"id":"000f1139-89b4-4f1e-89df-80dde1d944a6","method":"POST","headers":{":authority":"e2e-shared-b-be8bc5.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-be8bc5/rate-test-model-be8bc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AViFE7HLrg6LdAjN_FrvLeEnGsvvLoS1hNQFb0q0xuhJec0qVIviqN4dVARY"} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-be8bc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AViFE7HLrg6LdAjN_FrvLeEnGsvvLoS1hNQFb0q0xuhJec0qVIviqN4dVARY\"}"} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-be8bc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3784bf32-9372-4d29-a509-0e715fba811f","keyName":"e2e-rate-b-7128d0","subscription":"e2e-rate-iso-b-7128d0","tenant":"e2e-shared-b-be8bc5","userId":"3784bf32-9372-4d29-a509-0e715fba811f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-be8bc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-be8bc5/rate-test-model-be8bc5\",\"requestedSubscription\":\"e2e-rate-iso-b-7128d0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-be8bc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-be8bc5/models/facebook/opt-125m","name":"rate-test-model-be8bc5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7128d0","namespace":"ai-tenant-e2e-shared-b-be8bc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-be8bc5/rate-test-model-be8bc5"}} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-be8bc5/rate-test-model-be8bc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-be8bc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-7128d0"} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3784bf32-9372-4d29-a509-0e715fba811f","keyName":"e2e-rate-b-7128d0","selected_subscription":"e2e-rate-iso-b-7128d0","selected_subscription_key":"ai-tenant-e2e-shared-b-be8bc5/e2e-rate-iso-b-7128d0@ai-tenant-e2e-shared-b-be8bc5/rate-test-model-be8bc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-be8bc5/models/facebook/opt-125m","name":"rate-test-model-be8bc5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7128d0","namespace":"ai-tenant-e2e-shared-b-be8bc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-be8bc5/rate-test-model-be8bc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T05:02:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"000f1139-89b4-4f1e-89df-80dde1d944a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f873362df8f85dba716fa0cc5ab0e7b59a8db4666ad8bdb838d9d890f5347586"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/629bda86c09b8427f2239b691847b822068b36c6ef1a19a8a39380ea6fded16c"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34cac0c6941586bdf3433ff8077c178758a180592507d106fd42d9a0cf7cd156"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92277370011b7a2e9dbc3dfe10ffe353fd68563e281381bc3bcfb7ff19aef878"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a259c90526b714af9ed872baa8fa896b8a7eb6b22a567856cff62ea50364a03"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b969f551403d4b6afe96c822a85fa79912aa9d19aa5ee9c252ff969548122cf"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2aea58d5b501023e4dcd0f14803f5bb02ba62cdc3be80aa17b7ab10d6da47fb5"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/475242150ec43945969b4226bbf087858c72a3b2b24fa38e9b8dc9c929e0730d"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f6004ed1002b43458a96edc794e33b6c6f53f74c1ea50e62c27ce4ae045a6ee"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65d6e05ebf27ec836ecc5edb4149c60b10bb0fbf32c188feee44b18676643cbe"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76043dac40b9e6e87d7c005d23185841b5e9c9711ae4d3ad2415cbd7c690a09a"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82670b12382b5e9bf3145c667d4f0be6d79d93a8d1699b09aecbb4034c441ab0"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ab3a0fa39e30df0d6980e71fdd25d8601bb93fb88dd692e3c89b65dad0198cf"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0518d74d4bf64ccb30fbdc3a0674d124491aa68381cf5dd3e0769f2ce4caee5d"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a03a264f5b9782a64142cbef7f8639fce50be1260faba687278a3adfe7dfb3d"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e89345a1eeb9a85db78be77853ef3dcefd9e89b527bcf1f93f9c432d31f5ba2"} {"level":"info","ts":"2026-07-29T05:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96063ce07a1fdbe2852e6ee86e690f705b5cc42964e802ad9c5b38b489b59f53"} {"level":"info","ts":"2026-07-29T05:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea84638f1e2c1a06d6a6db89e593b179585e94801b735700390811a5a9e17323"} {"level":"info","ts":"2026-07-29T05:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba95f7eb76b69709c54fdf5d4bd7ef5a72a98c1d13f5500d65efeeec798a5111"} {"level":"info","ts":"2026-07-29T05:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f04bcc61fe66e415c4fed6dd582f53c112655cd571e740aff9ea6d5ca9c7a721"} {"level":"info","ts":"2026-07-29T05:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a3eb51d6d34d773df5b5c16046c415d5981b696b56258460591df815abb721b"} {"level":"info","ts":"2026-07-29T05:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72ff35d7df0fb30d56f2909b2bb115c57e3c982fc39c730e7ef6e5b21b38ab99"} {"level":"info","ts":"2026-07-29T05:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab347e66cc8a50086a8045ee114655c5bba9ab0afee3497fdd99c8cdc760acd1"} {"level":"info","ts":"2026-07-29T05:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3ad69c2404146369f4b64cae97c2be753fe5b4addb0fbde915fe4876aea4082"} {"level":"info","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38222","PortSpecifier":{"PortValue":38222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38222","PortSpecifier":{"PortValue":38222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301429,"nanos":683687088},"http":{"id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","method":"POST","headers":{":authority":"maas.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5785f8b4-6dbc-465a-9722-274730f8bee6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b68146b-955c-4b33-98ba-1820ad7ccab4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1997244e2d19"]}} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1997244e2d19"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b68146b-955c-4b33-98ba-1820ad7ccab4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5785f8b4-6dbc-465a-9722-274730f8bee6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"269e0dcb-87fe-40e1-9446-bf171e1ecff1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38228","PortSpecifier":{"PortValue":38228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38228","PortSpecifier":{"PortValue":38228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301429,"nanos":725273978},"http":{"id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","method":"POST","headers":{":authority":"maas.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RIrRfi1YDQBAnY9p_X3QpDtxgzp3b0JNiAAlF3ytzkpliteLVG2FxJT2XQSb"} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RIrRfi1YDQBAnY9p_X3QpDtxgzp3b0JNiAAlF3ytzkpliteLVG2FxJT2XQSb\"}"} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a7f7c6cf-e37e-4c9a-94a6-b09344ab7988","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"a7f7c6cf-e37e-4c9a-94a6-b09344ab7988","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a7f7c6cf-e37e-4c9a-94a6-b09344ab7988","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T05:03:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0dd1cc2-a664-4a6b-ab1a-4b7a81a062c4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d"} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d"} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d"} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02"} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d"} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02"} {"level":"error","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d"} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4"} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02"} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d"} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4"} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02"} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d"} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4"} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af"} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af"} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af"} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af"} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af"} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247"} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af"} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247"} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247"} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0e365159d63037a1229eda84beb5738e7ac20b818b70c57084e02732dd009a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0e365159d63037a1229eda84beb5738e7ac20b818b70c57084e02732dd009a"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0e365159d63037a1229eda84beb5738e7ac20b818b70c57084e02732dd009a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0e365159d63037a1229eda84beb5738e7ac20b818b70c57084e02732dd009a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d0e365159d63037a1229eda84beb5738e7ac20b818b70c57084e02732dd009a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0e365159d63037a1229eda84beb5738e7ac20b818b70c57084e02732dd009a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0e365159d63037a1229eda84beb5738e7ac20b818b70c57084e02732dd009a"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0e365159d63037a1229eda84beb5738e7ac20b818b70c57084e02732dd009a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247"} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0e365159d63037a1229eda84beb5738e7ac20b818b70c57084e02732dd009a"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247"} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b"} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230"} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b"} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5b6904b3ef5ac480e830f051b3d0a9d3f12938ee78d3bd471218e516ef2c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5b6904b3ef5ac480e830f051b3d0a9d3f12938ee78d3bd471218e516ef2c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5b6904b3ef5ac480e830f051b3d0a9d3f12938ee78d3bd471218e516ef2c92"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5b6904b3ef5ac480e830f051b3d0a9d3f12938ee78d3bd471218e516ef2c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f5b6904b3ef5ac480e830f051b3d0a9d3f12938ee78d3bd471218e516ef2c92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5b6904b3ef5ac480e830f051b3d0a9d3f12938ee78d3bd471218e516ef2c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bba4f29fad036233a82d065671f2438167849048437538929594a569bf58efdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bba4f29fad036233a82d065671f2438167849048437538929594a569bf58efdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5b6904b3ef5ac480e830f051b3d0a9d3f12938ee78d3bd471218e516ef2c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bba4f29fad036233a82d065671f2438167849048437538929594a569bf58efdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bba4f29fad036233a82d065671f2438167849048437538929594a569bf58efdc"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bba4f29fad036233a82d065671f2438167849048437538929594a569bf58efdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5b6904b3ef5ac480e830f051b3d0a9d3f12938ee78d3bd471218e516ef2c92"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bba4f29fad036233a82d065671f2438167849048437538929594a569bf58efdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bba4f29fad036233a82d065671f2438167849048437538929594a569bf58efdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bba4f29fad036233a82d065671f2438167849048437538929594a569bf58efdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T05:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bba4f29fad036233a82d065671f2438167849048437538929594a569bf58efdc"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bba4f29fad036233a82d065671f2438167849048437538929594a569bf58efdc"} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bba4f29fad036233a82d065671f2438167849048437538929594a569bf58efdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T05:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35"} {"level":"info","ts":"2026-07-29T05:04:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"123081c5-4187-4165-b16a-ce65a4db0d99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48500","PortSpecifier":{"PortValue":48500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"123081c5-4187-4165-b16a-ce65a4db0d99","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-c210b8.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T05:04:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"123081c5-4187-4165-b16a-ce65a4db0d99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48500","PortSpecifier":{"PortValue":48500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301484,"nanos":894771453},"http":{"id":"123081c5-4187-4165-b16a-ce65a4db0d99","method":"POST","headers":{":authority":"e2e-ipp-a-c210b8.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:04:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"123081c5-4187-4165-b16a-ce65a4db0d99","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T05:04:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"123081c5-4187-4165-b16a-ce65a4db0d99","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5785f8b4-6dbc-465a-9722-274730f8bee6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b68146b-955c-4b33-98ba-1820ad7ccab4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1997244e2d19"]}} {"level":"debug","ts":"2026-07-29T05:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"123081c5-4187-4165-b16a-ce65a4db0d99","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1997244e2d19"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b68146b-955c-4b33-98ba-1820ad7ccab4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5785f8b4-6dbc-465a-9722-274730f8bee6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-c210b8.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"123081c5-4187-4165-b16a-ce65a4db0d99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"123081c5-4187-4165-b16a-ce65a4db0d99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"123081c5-4187-4165-b16a-ce65a4db0d99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-c210b8/ipp-route-c210b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-c210b8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:04:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"123081c5-4187-4165-b16a-ce65a4db0d99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T05:04:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"123081c5-4187-4165-b16a-ce65a4db0d99","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T05:04:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"123081c5-4187-4165-b16a-ce65a4db0d99","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T05:04:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"123081c5-4187-4165-b16a-ce65a4db0d99","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T05:04:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"123081c5-4187-4165-b16a-ce65a4db0d99","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T05:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48504","PortSpecifier":{"PortValue":48504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","method":"POST","path":"/ai-tenant-e2e-ipp-a-c210b8/ipp-route-c210b8/v1/chat/completions","host":"e2e-ipp-a-c210b8.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T05:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48504","PortSpecifier":{"PortValue":48504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301486,"nanos":975949936},"http":{"id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","method":"POST","headers":{":authority":"e2e-ipp-a-c210b8.apps.43db4c7c-6f51-413b-aea9-1997244e2d19.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-c210b8/ipp-route-c210b8/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:04:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PgOEwA40y2yYU3yu_dT12kStkuZETBAcZKoMIYuo2BmLDcUMyphnBt0muIRO"} {"level":"debug","ts":"2026-07-29T05:04:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-c210b8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PgOEwA40y2yYU3yu_dT12kStkuZETBAcZKoMIYuo2BmLDcUMyphnBt0muIRO\"}"} {"level":"debug","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-c210b8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f9d9fa0d-3118-4287-8e60-dcc72ed5fb4d","keyName":"e2e-ipp-c210b8","subscription":"ipp-route-c210b8-sub","tenant":"e2e-ipp-a-c210b8","userId":"f9d9fa0d-3118-4287-8e60-dcc72ed5fb4d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-c210b8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-c210b8/ipp-route-c210b8\",\"requestedSubscription\":\"ipp-route-c210b8-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-c210b8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-c210b8/models/facebook/opt-125m","name":"ipp-route-c210b8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-c210b8-sub","namespace":"ai-tenant-e2e-ipp-a-c210b8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-c210b8/ipp-route-c210b8"}} {"level":"debug","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-c210b8/ipp-route-c210b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-c210b8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-c210b8-sub"} {"level":"debug","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f9d9fa0d-3118-4287-8e60-dcc72ed5fb4d","keyName":"e2e-ipp-c210b8","selected_subscription":"ipp-route-c210b8-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-c210b8/ipp-route-c210b8-sub@ai-tenant-e2e-ipp-a-c210b8/ipp-route-c210b8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-c210b8/models/facebook/opt-125m","name":"ipp-route-c210b8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-c210b8-sub","namespace":"ai-tenant-e2e-ipp-a-c210b8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-c210b8/ipp-route-c210b8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T05:04:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7032f7ff-edfe-4202-929a-e0bcbbbb8f76","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T05:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c5b02f0017dfc3a03165a8afd1a3815590612d67afe41e9835c817b807c1a7d"} {"level":"info","ts":"2026-07-29T05:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c93b1ab3b9ae56e63bbbc9744b61fa7a7c7c97a49f999b8750440024da86b5d6"} {"level":"info","ts":"2026-07-29T05:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f5b6904b3ef5ac480e830f051b3d0a9d3f12938ee78d3bd471218e516ef2c92"} {"level":"info","ts":"2026-07-29T05:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ffa920157941ca1cfb507600326f91af84d33d91292339bb27ee94d8c0df7af"} {"level":"info","ts":"2026-07-29T05:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8aacdd275fe770c8bbac68a0ff7f335cc2df7b5a6b497be9ab32999b8aad2e02"} {"level":"info","ts":"2026-07-29T05:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fde0da1091065bb6d4fbe3813f150ee8f256563b53159d75361a7c4d8aea88a4"} {"level":"info","ts":"2026-07-29T05:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a132c6b137581e14220e94a0f1783f4c844b82116a8a067e1a2157a2a8e99230"} {"level":"info","ts":"2026-07-29T05:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74db5f775ff5e5f35ceb5200681f9a557850569d82404413e591e634c22a0247"} {"level":"info","ts":"2026-07-29T05:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d0e365159d63037a1229eda84beb5738e7ac20b818b70c57084e02732dd009a"} {"level":"info","ts":"2026-07-29T05:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bba4f29fad036233a82d065671f2438167849048437538929594a569bf58efdc"} {"level":"info","ts":"2026-07-29T05:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7935459f2f76f86980d05c3c6a313ee001822f8cd617b4163e3fa80a4be8707b"} {"level":"info","ts":"2026-07-29T05:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1273a6d25b7264cb02e7f9e6d6bfbb021c2cf48e45d3883a6cd5fbc5b3ca6a35"}