{"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"}
{"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"}
{"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"}
{"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"}
{"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2"}
{"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"}
{"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b"}
{"level":"error","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"}
{"level":"error","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"}
{"level":"error","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8"}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"}
{"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"}
{"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"}
{"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"}
{"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51"}
{"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"}
{"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2"}
{"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5"}
{"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b"}
{"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee"}
{"level":"info","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47566","PortSpecifier":{"PortValue":47566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47566","PortSpecifier":{"PortValue":47566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438820,"nanos":723679134},"http":{"id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:52796","PortSpecifier":{"PortValue":52796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:52796","PortSpecifier":{"PortValue":52796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438820,"nanos":795586510},"http":{"id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"640813e3-41f4-443e-a647-b78ee92cf335","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47570","PortSpecifier":{"PortValue":47570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"640813e3-41f4-443e-a647-b78ee92cf335","method":"POST","path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"640813e3-41f4-443e-a647-b78ee92cf335","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47570","PortSpecifier":{"PortValue":47570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438820,"nanos":842614863},"http":{"id":"640813e3-41f4-443e-a647-b78ee92cf335","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qVmaqBOvfiVd1XxR_BGUaPPEJngGG98RupJbHxyrMhCrfVK83sS253wAIQiL"}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qVmaqBOvfiVd1XxR_BGUaPPEJngGG98RupJbHxyrMhCrfVK83sS253wAIQiL\"}"}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","keyName":"e2e-rate-a-379faf","subscription":"e2e-rate-iso-a-379faf","tenant":"e2e-shared-a-8f5391","userId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\",\"requestedSubscription\":\"e2e-rate-iso-a-379faf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-379faf","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"640813e3-41f4-443e-a647-b78ee92cf335","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-379faf"}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","keyName":"e2e-rate-a-379faf","selected_subscription":"e2e-rate-iso-a-379faf","selected_subscription_key":"ai-tenant-e2e-shared-a-8f5391/e2e-rate-iso-a-379faf@ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-379faf","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"640813e3-41f4-443e-a647-b78ee92cf335","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"640813e3-41f4-443e-a647-b78ee92cf335","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47578","PortSpecifier":{"PortValue":47578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","method":"POST","path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47578","PortSpecifier":{"PortValue":47578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438821,"nanos":908321185},"http":{"id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qVmaqBOvfiVd1XxR_BGUaPPEJngGG98RupJbHxyrMhCrfVK83sS253wAIQiL"}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qVmaqBOvfiVd1XxR_BGUaPPEJngGG98RupJbHxyrMhCrfVK83sS253wAIQiL\"}"}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","keyName":"e2e-rate-a-379faf","subscription":"e2e-rate-iso-a-379faf","tenant":"e2e-shared-a-8f5391","userId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\",\"requestedSubscription\":\"e2e-rate-iso-a-379faf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-379faf","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-379faf"}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","keyName":"e2e-rate-a-379faf","selected_subscription":"e2e-rate-iso-a-379faf","selected_subscription_key":"ai-tenant-e2e-shared-a-8f5391/e2e-rate-iso-a-379faf@ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-379faf","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47584","PortSpecifier":{"PortValue":47584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","method":"POST","path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47584","PortSpecifier":{"PortValue":47584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438822,"nanos":948826373},"http":{"id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qVmaqBOvfiVd1XxR_BGUaPPEJngGG98RupJbHxyrMhCrfVK83sS253wAIQiL"}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qVmaqBOvfiVd1XxR_BGUaPPEJngGG98RupJbHxyrMhCrfVK83sS253wAIQiL\"}"}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","keyName":"e2e-rate-a-379faf","subscription":"e2e-rate-iso-a-379faf","tenant":"e2e-shared-a-8f5391","userId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\",\"requestedSubscription\":\"e2e-rate-iso-a-379faf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-379faf","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-379faf"}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","keyName":"e2e-rate-a-379faf","selected_subscription":"e2e-rate-iso-a-379faf","selected_subscription_key":"ai-tenant-e2e-shared-a-8f5391/e2e-rate-iso-a-379faf@ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-379faf","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44482","PortSpecifier":{"PortValue":44482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44482","PortSpecifier":{"PortValue":44482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438833,"nanos":969029818},"http":{"id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}}
{"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60916","PortSpecifier":{"PortValue":60916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60916","PortSpecifier":{"PortValue":60916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438834,"nanos":12976464},"http":{"id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44492","PortSpecifier":{"PortValue":44492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21f2dc39-c070-408c-b543-b2a76a82676b","method":"POST","path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44492","PortSpecifier":{"PortValue":44492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438834,"nanos":54034288},"http":{"id":"21f2dc39-c070-408c-b543-b2a76a82676b","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPucvVxtzIFuVDEJ_rq258vkzeTTeKQaAghLOPtRGK1eY6CKuo3emzhR9otT"}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPucvVxtzIFuVDEJ_rq258vkzeTTeKQaAghLOPtRGK1eY6CKuo3emzhR9otT\"}"}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83e052c6-76c8-4706-8789-c01d121d2fbb","keyName":"e2e-rate-a-e76324","subscription":"e2e-rate-iso-a-e76324","tenant":"e2e-shared-a-8f5391","userId":"83e052c6-76c8-4706-8789-c01d121d2fbb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\",\"requestedSubscription\":\"e2e-rate-iso-a-e76324\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e76324","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e76324"}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"83e052c6-76c8-4706-8789-c01d121d2fbb","keyName":"e2e-rate-a-e76324","selected_subscription":"e2e-rate-iso-a-e76324","selected_subscription_key":"ai-tenant-e2e-shared-a-8f5391/e2e-rate-iso-a-e76324@ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e76324","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44494","PortSpecifier":{"PortValue":44494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","method":"POST","path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44494","PortSpecifier":{"PortValue":44494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438835,"nanos":94486836},"http":{"id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPucvVxtzIFuVDEJ_rq258vkzeTTeKQaAghLOPtRGK1eY6CKuo3emzhR9otT"}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPucvVxtzIFuVDEJ_rq258vkzeTTeKQaAghLOPtRGK1eY6CKuo3emzhR9otT\"}"}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83e052c6-76c8-4706-8789-c01d121d2fbb","keyName":"e2e-rate-a-e76324","subscription":"e2e-rate-iso-a-e76324","tenant":"e2e-shared-a-8f5391","userId":"83e052c6-76c8-4706-8789-c01d121d2fbb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\",\"requestedSubscription\":\"e2e-rate-iso-a-e76324\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e76324","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e76324"}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"83e052c6-76c8-4706-8789-c01d121d2fbb","keyName":"e2e-rate-a-e76324","selected_subscription":"e2e-rate-iso-a-e76324","selected_subscription_key":"ai-tenant-e2e-shared-a-8f5391/e2e-rate-iso-a-e76324@ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e76324","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44498","PortSpecifier":{"PortValue":44498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","method":"POST","path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44498","PortSpecifier":{"PortValue":44498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438836,"nanos":135437980},"http":{"id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPucvVxtzIFuVDEJ_rq258vkzeTTeKQaAghLOPtRGK1eY6CKuo3emzhR9otT"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPucvVxtzIFuVDEJ_rq258vkzeTTeKQaAghLOPtRGK1eY6CKuo3emzhR9otT\"}"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83e052c6-76c8-4706-8789-c01d121d2fbb","keyName":"e2e-rate-a-e76324","subscription":"e2e-rate-iso-a-e76324","tenant":"e2e-shared-a-8f5391","userId":"83e052c6-76c8-4706-8789-c01d121d2fbb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\",\"requestedSubscription\":\"e2e-rate-iso-a-e76324\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e76324","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e76324"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"83e052c6-76c8-4706-8789-c01d121d2fbb","keyName":"e2e-rate-a-e76324","selected_subscription":"e2e-rate-iso-a-e76324","selected_subscription_key":"ai-tenant-e2e-shared-a-8f5391/e2e-rate-iso-a-e76324@ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e76324","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60930","PortSpecifier":{"PortValue":60930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","method":"POST","path":"/ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d/v1/completions","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60930","PortSpecifier":{"PortValue":60930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438836,"nanos":174303973},"http":{"id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1J1vNRECN0xrY473X_ATWqbkcnomTVCZohjCkjeGszqbxRIL67U8nBhJxxTR3"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1J1vNRECN0xrY473X_ATWqbkcnomTVCZohjCkjeGszqbxRIL67U8nBhJxxTR3\"}"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01d8146a-a1de-4a04-a87d-8293cde5b845","keyName":"e2e-rate-b-e76324","subscription":"e2e-rate-iso-b-e76324","tenant":"e2e-shared-b-600c1d","userId":"01d8146a-a1de-4a04-a87d-8293cde5b845","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d\",\"requestedSubscription\":\"e2e-rate-iso-b-e76324\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-600c1d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e76324","namespace":"ai-tenant-e2e-shared-b-600c1d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e76324"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01d8146a-a1de-4a04-a87d-8293cde5b845","keyName":"e2e-rate-b-e76324","selected_subscription":"e2e-rate-iso-b-e76324","selected_subscription_key":"ai-tenant-e2e-shared-b-600c1d/e2e-rate-iso-b-e76324@ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-600c1d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e76324","namespace":"ai-tenant-e2e-shared-b-600c1d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"}
{"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5"}
{"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11"}
{"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"}
{"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b"}
{"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"}
{"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"}
{"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee"}
{"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"}
{"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa"}
{"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"}
{"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"}
{"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"}
{"level":"info","ts":"2026-07-07T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"}
{"level":"info","ts":"2026-07-07T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"}
{"level":"info","ts":"2026-07-07T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2"}
{"level":"info","ts":"2026-07-07T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51"}
{"level":"info","ts":"2026-07-07T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"}
{"level":"info","ts":"2026-07-07T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8"}
{"level":"info","ts":"2026-07-07T15:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"}