{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d81ae042c1b044250e5f1bcc0cf112fabff9ab1c0a1d96c1e60416bc77a47fa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5390ed4c9b944df9319a1c7c4d3898581f24698f429cd025323fd39f8b082fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5390ed4c9b944df9319a1c7c4d3898581f24698f429cd025323fd39f8b082fc"}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5390ed4c9b944df9319a1c7c4d3898581f24698f429cd025323fd39f8b082fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5390ed4c9b944df9319a1c7c4d3898581f24698f429cd025323fd39f8b082fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5390ed4c9b944df9319a1c7c4d3898581f24698f429cd025323fd39f8b082fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5390ed4c9b944df9319a1c7c4d3898581f24698f429cd025323fd39f8b082fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81ae042c1b044250e5f1bcc0cf112fabff9ab1c0a1d96c1e60416bc77a47fa8"}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5390ed4c9b944df9319a1c7c4d3898581f24698f429cd025323fd39f8b082fc"}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d253f03d7d1f13a1b3abfd6d3db7c8ef0da18f5b50a52b4a60db5a516581a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d253f03d7d1f13a1b3abfd6d3db7c8ef0da18f5b50a52b4a60db5a516581a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d253f03d7d1f13a1b3abfd6d3db7c8ef0da18f5b50a52b4a60db5a516581a37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d253f03d7d1f13a1b3abfd6d3db7c8ef0da18f5b50a52b4a60db5a516581a37"}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d253f03d7d1f13a1b3abfd6d3db7c8ef0da18f5b50a52b4a60db5a516581a37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d253f03d7d1f13a1b3abfd6d3db7c8ef0da18f5b50a52b4a60db5a516581a37"}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d253f03d7d1f13a1b3abfd6d3db7c8ef0da18f5b50a52b4a60db5a516581a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d253f03d7d1f13a1b3abfd6d3db7c8ef0da18f5b50a52b4a60db5a516581a37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d253f03d7d1f13a1b3abfd6d3db7c8ef0da18f5b50a52b4a60db5a516581a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d253f03d7d1f13a1b3abfd6d3db7c8ef0da18f5b50a52b4a60db5a516581a37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d253f03d7d1f13a1b3abfd6d3db7c8ef0da18f5b50a52b4a60db5a516581a37"}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b4ed8df9a8214ed7a261485217eb4eeb5c9023a987fbcfddcb3b6ce478ec6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b4ed8df9a8214ed7a261485217eb4eeb5c9023a987fbcfddcb3b6ce478ec6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b4ed8df9a8214ed7a261485217eb4eeb5c9023a987fbcfddcb3b6ce478ec6a"}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b4ed8df9a8214ed7a261485217eb4eeb5c9023a987fbcfddcb3b6ce478ec6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b4ed8df9a8214ed7a261485217eb4eeb5c9023a987fbcfddcb3b6ce478ec6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b4ed8df9a8214ed7a261485217eb4eeb5c9023a987fbcfddcb3b6ce478ec6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76750fff569fe801b1fc465bcac08db5d21f6b8064fa105145a161c5e1075f10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b4ed8df9a8214ed7a261485217eb4eeb5c9023a987fbcfddcb3b6ce478ec6a"}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76750fff569fe801b1fc465bcac08db5d21f6b8064fa105145a161c5e1075f10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b4ed8df9a8214ed7a261485217eb4eeb5c9023a987fbcfddcb3b6ce478ec6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76750fff569fe801b1fc465bcac08db5d21f6b8064fa105145a161c5e1075f10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76750fff569fe801b1fc465bcac08db5d21f6b8064fa105145a161c5e1075f10"}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76750fff569fe801b1fc465bcac08db5d21f6b8064fa105145a161c5e1075f10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76750fff569fe801b1fc465bcac08db5d21f6b8064fa105145a161c5e1075f10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76750fff569fe801b1fc465bcac08db5d21f6b8064fa105145a161c5e1075f10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76750fff569fe801b1fc465bcac08db5d21f6b8064fa105145a161c5e1075f10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13874c794d7fa0211c9893aca16ba8a0bc94ee6ffb079cc34b87d1086c6041bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b4ed8df9a8214ed7a261485217eb4eeb5c9023a987fbcfddcb3b6ce478ec6a"}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13874c794d7fa0211c9893aca16ba8a0bc94ee6ffb079cc34b87d1086c6041bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76750fff569fe801b1fc465bcac08db5d21f6b8064fa105145a161c5e1075f10"}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76750fff569fe801b1fc465bcac08db5d21f6b8064fa105145a161c5e1075f10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13874c794d7fa0211c9893aca16ba8a0bc94ee6ffb079cc34b87d1086c6041bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13874c794d7fa0211c9893aca16ba8a0bc94ee6ffb079cc34b87d1086c6041bd"}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13874c794d7fa0211c9893aca16ba8a0bc94ee6ffb079cc34b87d1086c6041bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13874c794d7fa0211c9893aca16ba8a0bc94ee6ffb079cc34b87d1086c6041bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13874c794d7fa0211c9893aca16ba8a0bc94ee6ffb079cc34b87d1086c6041bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13874c794d7fa0211c9893aca16ba8a0bc94ee6ffb079cc34b87d1086c6041bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13874c794d7fa0211c9893aca16ba8a0bc94ee6ffb079cc34b87d1086c6041bd"}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13874c794d7fa0211c9893aca16ba8a0bc94ee6ffb079cc34b87d1086c6041bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13874c794d7fa0211c9893aca16ba8a0bc94ee6ffb079cc34b87d1086c6041bd"}
{"level":"error","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:29:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"info","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f4a3630-1c52-431a-abb8-29f100f57b06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43872","PortSpecifier":{"PortValue":43872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f4a3630-1c52-431a-abb8-29f100f57b06","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8f586d.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f4a3630-1c52-431a-abb8-29f100f57b06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43872","PortSpecifier":{"PortValue":43872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785436165,"nanos":269559924},"http":{"id":"0f4a3630-1c52-431a-abb8-29f100f57b06","method":"POST","headers":{":authority":"e2e-shared-a-8f586d.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f4a3630-1c52-431a-abb8-29f100f57b06","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f4a3630-1c52-431a-abb8-29f100f57b06","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bdd0d522-41e6-4200-ab0b-3119377bf3d0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e5e3c7d-be85-411b-a760-4c0086fe2431"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3ab629cf48d1"]}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f4a3630-1c52-431a-abb8-29f100f57b06","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3ab629cf48d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e5e3c7d-be85-411b-a760-4c0086fe2431"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bdd0d522-41e6-4200-ab0b-3119377bf3d0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ec2835984b14b544b82a0e52c1d0c20cdd128a8a9660df14c7169ac90aff7da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f586d.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f4a3630-1c52-431a-abb8-29f100f57b06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f4a3630-1c52-431a-abb8-29f100f57b06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f4a3630-1c52-431a-abb8-29f100f57b06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8f586d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f4a3630-1c52-431a-abb8-29f100f57b06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f4a3630-1c52-431a-abb8-29f100f57b06","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f4a3630-1c52-431a-abb8-29f100f57b06","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f4a3630-1c52-431a-abb8-29f100f57b06","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f4a3630-1c52-431a-abb8-29f100f57b06","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43200","PortSpecifier":{"PortValue":43200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fbbaa9.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43200","PortSpecifier":{"PortValue":43200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785436165,"nanos":308174787},"http":{"id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","method":"POST","headers":{":authority":"e2e-shared-b-fbbaa9.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bdd0d522-41e6-4200-ab0b-3119377bf3d0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e5e3c7d-be85-411b-a760-4c0086fe2431"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3ab629cf48d1"]}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3ab629cf48d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e5e3c7d-be85-411b-a760-4c0086fe2431"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bdd0d522-41e6-4200-ab0b-3119377bf3d0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d81ae042c1b044250e5f1bcc0cf112fabff9ab1c0a1d96c1e60416bc77a47fa8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fbbaa9.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fbbaa9/rate-test-model-fbbaa9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fbbaa9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af1dbf70-ab10-4fdb-a559-7f5e7f8585a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43884","PortSpecifier":{"PortValue":43884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9dd15178-20d5-474b-9b6b-8906f314460a","method":"POST","path":"/ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d/v1/completions","host":"e2e-shared-a-8f586d.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43884","PortSpecifier":{"PortValue":43884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785436165,"nanos":342385154},"http":{"id":"9dd15178-20d5-474b-9b6b-8906f314460a","method":"POST","headers":{":authority":"e2e-shared-a-8f586d.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zhdezPZEmLx73vXe_G6L4Ja7vbucdK115LKI6Lp87Ktn1muVP3RCPBDC0MbZ"}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f586d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zhdezPZEmLx73vXe_G6L4Ja7vbucdK115LKI6Lp87Ktn1muVP3RCPBDC0MbZ\"}"}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f586d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"361a6fd3-7464-462f-8ca7-d71cd24d1c74","keyName":"e2e-rate-a-1792db","subscription":"e2e-rate-iso-a-1792db","tenant":"e2e-shared-a-8f586d","userId":"361a6fd3-7464-462f-8ca7-d71cd24d1c74","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f586d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d\",\"requestedSubscription\":\"e2e-rate-iso-a-1792db\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f586d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-8f586d/models/facebook/opt-125m","name":"rate-test-model-8f586d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1792db","namespace":"ai-tenant-e2e-shared-a-8f586d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d"}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8f586d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1792db"}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"361a6fd3-7464-462f-8ca7-d71cd24d1c74","keyName":"e2e-rate-a-1792db","selected_subscription":"e2e-rate-iso-a-1792db","selected_subscription_key":"ai-tenant-e2e-shared-a-8f586d/e2e-rate-iso-a-1792db@ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-8f586d/models/facebook/opt-125m","name":"rate-test-model-8f586d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1792db","namespace":"ai-tenant-e2e-shared-a-8f586d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T18:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dd15178-20d5-474b-9b6b-8906f314460a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43898","PortSpecifier":{"PortValue":43898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"160828a8-97a9-4b79-9455-d671fa7c0549","method":"POST","path":"/ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d/v1/completions","host":"e2e-shared-a-8f586d.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43898","PortSpecifier":{"PortValue":43898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785436166,"nanos":386292553},"http":{"id":"160828a8-97a9-4b79-9455-d671fa7c0549","method":"POST","headers":{":authority":"e2e-shared-a-8f586d.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zhdezPZEmLx73vXe_G6L4Ja7vbucdK115LKI6Lp87Ktn1muVP3RCPBDC0MbZ"}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f586d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zhdezPZEmLx73vXe_G6L4Ja7vbucdK115LKI6Lp87Ktn1muVP3RCPBDC0MbZ\"}"}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f586d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"361a6fd3-7464-462f-8ca7-d71cd24d1c74","keyName":"e2e-rate-a-1792db","subscription":"e2e-rate-iso-a-1792db","tenant":"e2e-shared-a-8f586d","userId":"361a6fd3-7464-462f-8ca7-d71cd24d1c74","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f586d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d\",\"requestedSubscription\":\"e2e-rate-iso-a-1792db\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f586d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-8f586d/models/facebook/opt-125m","name":"rate-test-model-8f586d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1792db","namespace":"ai-tenant-e2e-shared-a-8f586d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d"}}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8f586d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1792db"}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"361a6fd3-7464-462f-8ca7-d71cd24d1c74","keyName":"e2e-rate-a-1792db","selected_subscription":"e2e-rate-iso-a-1792db","selected_subscription_key":"ai-tenant-e2e-shared-a-8f586d/e2e-rate-iso-a-1792db@ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-8f586d/models/facebook/opt-125m","name":"rate-test-model-8f586d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1792db","namespace":"ai-tenant-e2e-shared-a-8f586d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T18:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"160828a8-97a9-4b79-9455-d671fa7c0549","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43914","PortSpecifier":{"PortValue":43914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb505a3b-0d51-4d22-a772-64db5ef51505","method":"POST","path":"/ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d/v1/completions","host":"e2e-shared-a-8f586d.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43914","PortSpecifier":{"PortValue":43914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785436167,"nanos":425288618},"http":{"id":"fb505a3b-0d51-4d22-a772-64db5ef51505","method":"POST","headers":{":authority":"e2e-shared-a-8f586d.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zhdezPZEmLx73vXe_G6L4Ja7vbucdK115LKI6Lp87Ktn1muVP3RCPBDC0MbZ"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f586d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zhdezPZEmLx73vXe_G6L4Ja7vbucdK115LKI6Lp87Ktn1muVP3RCPBDC0MbZ\"}"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f586d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"361a6fd3-7464-462f-8ca7-d71cd24d1c74","keyName":"e2e-rate-a-1792db","subscription":"e2e-rate-iso-a-1792db","tenant":"e2e-shared-a-8f586d","userId":"361a6fd3-7464-462f-8ca7-d71cd24d1c74","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f586d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d\",\"requestedSubscription\":\"e2e-rate-iso-a-1792db\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f586d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-8f586d/models/facebook/opt-125m","name":"rate-test-model-8f586d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1792db","namespace":"ai-tenant-e2e-shared-a-8f586d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d"}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8f586d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1792db"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"361a6fd3-7464-462f-8ca7-d71cd24d1c74","keyName":"e2e-rate-a-1792db","selected_subscription":"e2e-rate-iso-a-1792db","selected_subscription_key":"ai-tenant-e2e-shared-a-8f586d/e2e-rate-iso-a-1792db@ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-8f586d/models/facebook/opt-125m","name":"rate-test-model-8f586d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1792db","namespace":"ai-tenant-e2e-shared-a-8f586d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8f586d/rate-test-model-8f586d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb505a3b-0d51-4d22-a772-64db5ef51505","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43216","PortSpecifier":{"PortValue":43216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","method":"POST","path":"/ai-tenant-e2e-shared-b-fbbaa9/rate-test-model-fbbaa9/v1/completions","host":"e2e-shared-b-fbbaa9.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43216","PortSpecifier":{"PortValue":43216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785436167,"nanos":462972542},"http":{"id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","method":"POST","headers":{":authority":"e2e-shared-b-fbbaa9.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-fbbaa9/rate-test-model-fbbaa9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GHpJCKwrLQfyuKvb_pWFPAJklFgP0qKMflXRLYZPGgi7KjylQADp278VFJz3"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fbbaa9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GHpJCKwrLQfyuKvb_pWFPAJklFgP0qKMflXRLYZPGgi7KjylQADp278VFJz3\"}"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fbbaa9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b87b6f34-d1fd-422d-bfce-7880e4573d94","keyName":"e2e-rate-b-1792db","subscription":"e2e-rate-iso-b-1792db","tenant":"e2e-shared-b-fbbaa9","userId":"b87b6f34-d1fd-422d-bfce-7880e4573d94","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-fbbaa9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-fbbaa9/rate-test-model-fbbaa9\",\"requestedSubscription\":\"e2e-rate-iso-b-1792db\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fbbaa9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-fbbaa9/models/facebook/opt-125m","name":"rate-test-model-fbbaa9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1792db","namespace":"ai-tenant-e2e-shared-b-fbbaa9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-fbbaa9/rate-test-model-fbbaa9"}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fbbaa9/rate-test-model-fbbaa9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fbbaa9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1792db"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b87b6f34-d1fd-422d-bfce-7880e4573d94","keyName":"e2e-rate-b-1792db","selected_subscription":"e2e-rate-iso-b-1792db","selected_subscription_key":"ai-tenant-e2e-shared-b-fbbaa9/e2e-rate-iso-b-1792db@ai-tenant-e2e-shared-b-fbbaa9/rate-test-model-fbbaa9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-fbbaa9/models/facebook/opt-125m","name":"rate-test-model-fbbaa9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1792db","namespace":"ai-tenant-e2e-shared-b-fbbaa9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-fbbaa9/rate-test-model-fbbaa9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T18:29:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ac27f1f-e682-4031-ae4d-6aeae438f4d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac8157bcc1028793544ec623986776581d68d01d0301c1bddb529e7e2c8bdfab"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31b047536f6d08dac3b4acab54b1798a78496b4c5172be14c8a26c643a5e9a5f"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4a7bb5852807e8172a1cd9fd618e1375c9c693e2ed6608b1c5c5c7ccb373f5a"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3785ecbed9af36503503a5558e6f7802afc8715fcd8e1f43a8e99dda1f04b3b9"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7866fb00cc934b9a6d41c583fb004ca552177196781065b8be53236b29be40cc"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5390ed4c9b944df9319a1c7c4d3898581f24698f429cd025323fd39f8b082fc"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7a3f6ad82d087ade94a8d7db20f0c3cca1b248e48778f21d2aea58a26bb9afc"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d253f03d7d1f13a1b3abfd6d3db7c8ef0da18f5b50a52b4a60db5a516581a37"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/123f4bd67d515a70a3f106c0b7468047c1d39b01637c16d60772313473513bf3"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76750fff569fe801b1fc465bcac08db5d21f6b8064fa105145a161c5e1075f10"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5ce15b598ff8300c08ed5f22c3c89c48acf4021477c59a6166d48d07f12c4fc"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d33afe023a625f3e26648f0b7bda26b6acc8e52b48725380c559639506e93d0"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bce6f1eb2b29ec836d95573fd807fc14e0cfd3f5d2d8a3a96db04552eccc5dec"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13874c794d7fa0211c9893aca16ba8a0bc94ee6ffb079cc34b87d1086c6041bd"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37b5f8d82b647b31e7db9ae363541534073f3cd37863b7b69a2fd8ab0ee77a60"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/321c24608a6efeb12c9b8d37ce6bbbea22b182b84ba314811105b3c1db186c44"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d81ae042c1b044250e5f1bcc0cf112fabff9ab1c0a1d96c1e60416bc77a47fa8"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bb5e6132022277094ff2b1abcc4356de6ec20e6d108ae6163046d6f7f5788ee"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b65084cb344e4780c20566db1f1ba92002bf1dce22f965f5d1194cfe8c19763"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfc608b4eeebb526e32eed7eae7a89e180fc871b3197efa6cac7b2a321290e44"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3b4ed8df9a8214ed7a261485217eb4eeb5c9023a987fbcfddcb3b6ce478ec6a"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d86c74ca246ca8913e2c1827bf008361bfe27ded956c5ab86018072eafc7f7e"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23fdca22b948b5b68b7c8b2e38b43676e8029dd5e6d222bcb57fe94b9754de95"}
{"level":"info","ts":"2026-07-30T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ec2835984b14b544b82a0e52c1d0c20cdd128a8a9660df14c7169ac90aff7da"}
{"level":"info","ts":"2026-07-30T18:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45634","PortSpecifier":{"PortValue":45634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T18:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45634","PortSpecifier":{"PortValue":45634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785436254,"nanos":942703694},"http":{"id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","method":"POST","headers":{":authority":"maas.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-30T18:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bdd0d522-41e6-4200-ab0b-3119377bf3d0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e5e3c7d-be85-411b-a760-4c0086fe2431"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3ab629cf48d1"]}}
{"level":"debug","ts":"2026-07-30T18:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3ab629cf48d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e5e3c7d-be85-411b-a760-4c0086fe2431"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bdd0d522-41e6-4200-ab0b-3119377bf3d0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-30T18:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T18:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-30T18:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T18:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"204a2dd8-896b-48f6-8e34-8f098d34d51c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45648","PortSpecifier":{"PortValue":45648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45648","PortSpecifier":{"PortValue":45648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785436254,"nanos":997681880},"http":{"id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","method":"POST","headers":{":authority":"maas.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oDltaeUZq52JSmT2_BStY3uXeOf8iV6BnvDTGwmAjisXA1ercKzzBrHkwcTp"}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oDltaeUZq52JSmT2_BStY3uXeOf8iV6BnvDTGwmAjisXA1ercKzzBrHkwcTp\"}"}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8479e3df-bcdb-4074-b854-2c48d66b6e40","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"8479e3df-bcdb-4074-b854-2c48d66b6e40","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8479e3df-bcdb-4074-b854-2c48d66b6e40","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T18:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fa1c884-5835-4174-9e4e-f9be00dd0922","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a62043f0040b66237dbf341034831a6099d87d2fa1af32b103fdd289f7553b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a62043f0040b66237dbf341034831a6099d87d2fa1af32b103fdd289f7553b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a62043f0040b66237dbf341034831a6099d87d2fa1af32b103fdd289f7553b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a62043f0040b66237dbf341034831a6099d87d2fa1af32b103fdd289f7553b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a62043f0040b66237dbf341034831a6099d87d2fa1af32b103fdd289f7553b"}
{"level":"debug","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a62043f0040b66237dbf341034831a6099d87d2fa1af32b103fdd289f7553b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a62043f0040b66237dbf341034831a6099d87d2fa1af32b103fdd289f7553b"}
{"level":"debug","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a62043f0040b66237dbf341034831a6099d87d2fa1af32b103fdd289f7553b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2a62043f0040b66237dbf341034831a6099d87d2fa1af32b103fdd289f7553b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a62043f0040b66237dbf341034831a6099d87d2fa1af32b103fdd289f7553b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2312b0736eb4ff0d0533b93ad4b7a1671694a313c36299a88a1f78a8a35271ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2312b0736eb4ff0d0533b93ad4b7a1671694a313c36299a88a1f78a8a35271ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a62043f0040b66237dbf341034831a6099d87d2fa1af32b103fdd289f7553b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2312b0736eb4ff0d0533b93ad4b7a1671694a313c36299a88a1f78a8a35271ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2312b0736eb4ff0d0533b93ad4b7a1671694a313c36299a88a1f78a8a35271ad"}
{"level":"debug","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2312b0736eb4ff0d0533b93ad4b7a1671694a313c36299a88a1f78a8a35271ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2312b0736eb4ff0d0533b93ad4b7a1671694a313c36299a88a1f78a8a35271ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2312b0736eb4ff0d0533b93ad4b7a1671694a313c36299a88a1f78a8a35271ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2312b0736eb4ff0d0533b93ad4b7a1671694a313c36299a88a1f78a8a35271ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a62043f0040b66237dbf341034831a6099d87d2fa1af32b103fdd289f7553b"}
{"level":"info","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2312b0736eb4ff0d0533b93ad4b7a1671694a313c36299a88a1f78a8a35271ad"}
{"level":"debug","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62d66e1dedcdc9785f44221ab4ce2698af583d2098c04271d4e667e666bc7d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62d66e1dedcdc9785f44221ab4ce2698af583d2098c04271d4e667e666bc7d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62d66e1dedcdc9785f44221ab4ce2698af583d2098c04271d4e667e666bc7d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62d66e1dedcdc9785f44221ab4ce2698af583d2098c04271d4e667e666bc7d8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62d66e1dedcdc9785f44221ab4ce2698af583d2098c04271d4e667e666bc7d8d"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62d66e1dedcdc9785f44221ab4ce2698af583d2098c04271d4e667e666bc7d8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62d66e1dedcdc9785f44221ab4ce2698af583d2098c04271d4e667e666bc7d8d"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62d66e1dedcdc9785f44221ab4ce2698af583d2098c04271d4e667e666bc7d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62d66e1dedcdc9785f44221ab4ce2698af583d2098c04271d4e667e666bc7d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62d66e1dedcdc9785f44221ab4ce2698af583d2098c04271d4e667e666bc7d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62d66e1dedcdc9785f44221ab4ce2698af583d2098c04271d4e667e666bc7d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62d66e1dedcdc9785f44221ab4ce2698af583d2098c04271d4e667e666bc7d8d"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f7d1bf0dfdcc25d0b65e04b7d489da97e638a9c4c77e597c9b41940f6aeb506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f7d1bf0dfdcc25d0b65e04b7d489da97e638a9c4c77e597c9b41940f6aeb506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f7d1bf0dfdcc25d0b65e04b7d489da97e638a9c4c77e597c9b41940f6aeb506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f7d1bf0dfdcc25d0b65e04b7d489da97e638a9c4c77e597c9b41940f6aeb506"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f7d1bf0dfdcc25d0b65e04b7d489da97e638a9c4c77e597c9b41940f6aeb506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f7d1bf0dfdcc25d0b65e04b7d489da97e638a9c4c77e597c9b41940f6aeb506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f7d1bf0dfdcc25d0b65e04b7d489da97e638a9c4c77e597c9b41940f6aeb506"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f7d1bf0dfdcc25d0b65e04b7d489da97e638a9c4c77e597c9b41940f6aeb506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f7d1bf0dfdcc25d0b65e04b7d489da97e638a9c4c77e597c9b41940f6aeb506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f7d1bf0dfdcc25d0b65e04b7d489da97e638a9c4c77e597c9b41940f6aeb506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"028e396348c9cb060641c97532f602f49175d0cf8baabe33f5220d8803a249f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/028e396348c9cb060641c97532f602f49175d0cf8baabe33f5220d8803a249f1"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"028e396348c9cb060641c97532f602f49175d0cf8baabe33f5220d8803a249f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f7d1bf0dfdcc25d0b65e04b7d489da97e638a9c4c77e597c9b41940f6aeb506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"028e396348c9cb060641c97532f602f49175d0cf8baabe33f5220d8803a249f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["028e396348c9cb060641c97532f602f49175d0cf8baabe33f5220d8803a249f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"028e396348c9cb060641c97532f602f49175d0cf8baabe33f5220d8803a249f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"028e396348c9cb060641c97532f602f49175d0cf8baabe33f5220d8803a249f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["028e396348c9cb060641c97532f602f49175d0cf8baabe33f5220d8803a249f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"}
{"level":"error","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"028e396348c9cb060641c97532f602f49175d0cf8baabe33f5220d8803a249f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"028e396348c9cb060641c97532f602f49175d0cf8baabe33f5220d8803a249f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"028e396348c9cb060641c97532f602f49175d0cf8baabe33f5220d8803a249f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f7d1bf0dfdcc25d0b65e04b7d489da97e638a9c4c77e597c9b41940f6aeb506"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/028e396348c9cb060641c97532f602f49175d0cf8baabe33f5220d8803a249f1"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf961f10d8e29f3a814ea1070cdabbf58bdfeca61477bc31a34512e24fbc6ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf961f10d8e29f3a814ea1070cdabbf58bdfeca61477bc31a34512e24fbc6ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ef726a51fb0d9d24b0588e9e14edfee7a85cb8b6b61051c90f27b867f7e42ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf961f10d8e29f3a814ea1070cdabbf58bdfeca61477bc31a34512e24fbc6ae"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ef726a51fb0d9d24b0588e9e14edfee7a85cb8b6b61051c90f27b867f7e42ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf961f10d8e29f3a814ea1070cdabbf58bdfeca61477bc31a34512e24fbc6ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaf961f10d8e29f3a814ea1070cdabbf58bdfeca61477bc31a34512e24fbc6ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf961f10d8e29f3a814ea1070cdabbf58bdfeca61477bc31a34512e24fbc6ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ef726a51fb0d9d24b0588e9e14edfee7a85cb8b6b61051c90f27b867f7e42ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf961f10d8e29f3a814ea1070cdabbf58bdfeca61477bc31a34512e24fbc6ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c587220c68a13eb9790b8ea45293612bad53314b6764bef9fdd53708f7d1ea9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c587220c68a13eb9790b8ea45293612bad53314b6764bef9fdd53708f7d1ea9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ef726a51fb0d9d24b0588e9e14edfee7a85cb8b6b61051c90f27b867f7e42ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ef726a51fb0d9d24b0588e9e14edfee7a85cb8b6b61051c90f27b867f7e42ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2776debc28b47b166b8a10b2b2ec85f9868275865a3aca496b438983a3f3ed26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2776debc28b47b166b8a10b2b2ec85f9868275865a3aca496b438983a3f3ed26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c587220c68a13eb9790b8ea45293612bad53314b6764bef9fdd53708f7d1ea9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ef726a51fb0d9d24b0588e9e14edfee7a85cb8b6b61051c90f27b867f7e42ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2776debc28b47b166b8a10b2b2ec85f9868275865a3aca496b438983a3f3ed26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ef726a51fb0d9d24b0588e9e14edfee7a85cb8b6b61051c90f27b867f7e42ad"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2776debc28b47b166b8a10b2b2ec85f9868275865a3aca496b438983a3f3ed26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ef726a51fb0d9d24b0588e9e14edfee7a85cb8b6b61051c90f27b867f7e42ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ef726a51fb0d9d24b0588e9e14edfee7a85cb8b6b61051c90f27b867f7e42ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf961f10d8e29f3a814ea1070cdabbf58bdfeca61477bc31a34512e24fbc6ae"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ef726a51fb0d9d24b0588e9e14edfee7a85cb8b6b61051c90f27b867f7e42ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c587220c68a13eb9790b8ea45293612bad53314b6764bef9fdd53708f7d1ea9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c587220c68a13eb9790b8ea45293612bad53314b6764bef9fdd53708f7d1ea9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2776debc28b47b166b8a10b2b2ec85f9868275865a3aca496b438983a3f3ed26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ef726a51fb0d9d24b0588e9e14edfee7a85cb8b6b61051c90f27b867f7e42ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c587220c68a13eb9790b8ea45293612bad53314b6764bef9fdd53708f7d1ea9f"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c587220c68a13eb9790b8ea45293612bad53314b6764bef9fdd53708f7d1ea9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c587220c68a13eb9790b8ea45293612bad53314b6764bef9fdd53708f7d1ea9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c587220c68a13eb9790b8ea45293612bad53314b6764bef9fdd53708f7d1ea9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c587220c68a13eb9790b8ea45293612bad53314b6764bef9fdd53708f7d1ea9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c587220c68a13eb9790b8ea45293612bad53314b6764bef9fdd53708f7d1ea9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2776debc28b47b166b8a10b2b2ec85f9868275865a3aca496b438983a3f3ed26"}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2776debc28b47b166b8a10b2b2ec85f9868275865a3aca496b438983a3f3ed26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T18:31:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2776debc28b47b166b8a10b2b2ec85f9868275865a3aca496b438983a3f3ed26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2776debc28b47b166b8a10b2b2ec85f9868275865a3aca496b438983a3f3ed26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2776debc28b47b166b8a10b2b2ec85f9868275865a3aca496b438983a3f3ed26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ef726a51fb0d9d24b0588e9e14edfee7a85cb8b6b61051c90f27b867f7e42ad"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c587220c68a13eb9790b8ea45293612bad53314b6764bef9fdd53708f7d1ea9f"}
{"level":"info","ts":"2026-07-30T18:31:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2776debc28b47b166b8a10b2b2ec85f9868275865a3aca496b438983a3f3ed26"}
{"level":"info","ts":"2026-07-30T18:31:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0effd934-1175-41bf-803d-ee69bb79cb75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:32964","PortSpecifier":{"PortValue":32964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0effd934-1175-41bf-803d-ee69bb79cb75","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-fadb12.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T18:31:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0effd934-1175-41bf-803d-ee69bb79cb75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:32964","PortSpecifier":{"PortValue":32964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785436303,"nanos":121852053},"http":{"id":"0effd934-1175-41bf-803d-ee69bb79cb75","method":"POST","headers":{":authority":"e2e-ipp-a-fadb12.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:31:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0effd934-1175-41bf-803d-ee69bb79cb75","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-30T18:31:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0effd934-1175-41bf-803d-ee69bb79cb75","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bdd0d522-41e6-4200-ab0b-3119377bf3d0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e5e3c7d-be85-411b-a760-4c0086fe2431"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3ab629cf48d1"]}}
{"level":"debug","ts":"2026-07-30T18:31:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0effd934-1175-41bf-803d-ee69bb79cb75","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3ab629cf48d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e5e3c7d-be85-411b-a760-4c0086fe2431"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bdd0d522-41e6-4200-ab0b-3119377bf3d0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-fadb12.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:31:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0effd934-1175-41bf-803d-ee69bb79cb75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:31:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0effd934-1175-41bf-803d-ee69bb79cb75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:31:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0effd934-1175-41bf-803d-ee69bb79cb75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-fadb12/ipp-route-fadb12\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-fadb12/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:31:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0effd934-1175-41bf-803d-ee69bb79cb75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-30T18:31:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0effd934-1175-41bf-803d-ee69bb79cb75","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T18:31:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0effd934-1175-41bf-803d-ee69bb79cb75","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-30T18:31:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0effd934-1175-41bf-803d-ee69bb79cb75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T18:31:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0effd934-1175-41bf-803d-ee69bb79cb75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:32970","PortSpecifier":{"PortValue":32970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83d24bb5-00ec-4014-a614-209e403d9be3","method":"POST","path":"/ai-tenant-e2e-ipp-a-fadb12/ipp-route-fadb12/v1/chat/completions","host":"e2e-ipp-a-fadb12.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:32970","PortSpecifier":{"PortValue":32970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785436305,"nanos":180988470},"http":{"id":"83d24bb5-00ec-4014-a614-209e403d9be3","method":"POST","headers":{":authority":"e2e-ipp-a-fadb12.apps.e473180a-7f18-4050-b363-3ab629cf48d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-fadb12/ipp-route-fadb12/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QIYQdbiSFQsnzTKI_21Ko5G9zM9R0EDpe9a7njLooiLjNnrfTiRvJQEznoTi"}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-fadb12.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QIYQdbiSFQsnzTKI_21Ko5G9zM9R0EDpe9a7njLooiLjNnrfTiRvJQEznoTi\"}"}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-fadb12.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3208f34-92d5-43b9-ac7d-0999698bbc0d","keyName":"e2e-ipp-fadb12","subscription":"ipp-route-fadb12-sub","tenant":"e2e-ipp-a-fadb12","userId":"d3208f34-92d5-43b9-ac7d-0999698bbc0d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-fadb12.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-fadb12/ipp-route-fadb12\",\"requestedSubscription\":\"ipp-route-fadb12-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-fadb12.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-fadb12/models/facebook/opt-125m","name":"ipp-route-fadb12","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-fadb12-sub","namespace":"ai-tenant-e2e-ipp-a-fadb12","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-fadb12/ipp-route-fadb12"}}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-fadb12/ipp-route-fadb12\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-fadb12/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-fadb12-sub"}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d3208f34-92d5-43b9-ac7d-0999698bbc0d","keyName":"e2e-ipp-fadb12","selected_subscription":"ipp-route-fadb12-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-fadb12/ipp-route-fadb12-sub@ai-tenant-e2e-ipp-a-fadb12/ipp-route-fadb12","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-fadb12/models/facebook/opt-125m","name":"ipp-route-fadb12","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-fadb12-sub","namespace":"ai-tenant-e2e-ipp-a-fadb12","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-fadb12/ipp-route-fadb12"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T18:31:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83d24bb5-00ec-4014-a614-209e403d9be3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T18:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63768447ef21f364d1f8af02d7b149261bca87a1ed6e71c441d5059e11914578"}
{"level":"info","ts":"2026-07-30T18:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f7d1bf0dfdcc25d0b65e04b7d489da97e638a9c4c77e597c9b41940f6aeb506"}
{"level":"info","ts":"2026-07-30T18:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c587220c68a13eb9790b8ea45293612bad53314b6764bef9fdd53708f7d1ea9f"}
{"level":"info","ts":"2026-07-30T18:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2a62043f0040b66237dbf341034831a6099d87d2fa1af32b103fdd289f7553b"}
{"level":"info","ts":"2026-07-30T18:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2312b0736eb4ff0d0533b93ad4b7a1671694a313c36299a88a1f78a8a35271ad"}
{"level":"info","ts":"2026-07-30T18:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26b79c856e5507af315b784e8636e54de14c20c2a0aa2933fa67e7082c70800c"}
{"level":"info","ts":"2026-07-30T18:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2776debc28b47b166b8a10b2b2ec85f9868275865a3aca496b438983a3f3ed26"}
{"level":"info","ts":"2026-07-30T18:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/028e396348c9cb060641c97532f602f49175d0cf8baabe33f5220d8803a249f1"}
{"level":"info","ts":"2026-07-30T18:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ef726a51fb0d9d24b0588e9e14edfee7a85cb8b6b61051c90f27b867f7e42ad"}
{"level":"info","ts":"2026-07-30T18:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/686423648c3270f451052c66bfd9343a263f8f5ee230feb8378855b39d80c113"}
{"level":"info","ts":"2026-07-30T18:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaf961f10d8e29f3a814ea1070cdabbf58bdfeca61477bc31a34512e24fbc6ae"}
{"level":"info","ts":"2026-07-30T18:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62d66e1dedcdc9785f44221ab4ce2698af583d2098c04271d4e667e666bc7d8d"}