{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea"}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea"}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea"}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"}
{"level":"info","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"debug","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe"}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef"}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T17:51:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"}
{"level":"error","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea"}
{"level":"debug","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"}
{"level":"info","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"}
{"level":"debug","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"}
{"level":"info","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"}
{"level":"debug","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12"}
{"level":"info","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726"}
{"level":"info","ts":"2026-07-13T17:51:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"}
{"level":"info","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37772","PortSpecifier":{"PortValue":37772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37772","PortSpecifier":{"PortValue":37772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965080,"nanos":207506524},"http":{"id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20ab9d7a-59c6-4f3e-aa29-bae380d01314","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42514","PortSpecifier":{"PortValue":42514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42514","PortSpecifier":{"PortValue":42514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965080,"nanos":251936996},"http":{"id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"743c72c7-9d55-4df5-9f30-5d69c54e7d36","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37788","PortSpecifier":{"PortValue":37788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"006af1c0-44ba-403a-8581-d3e5017ece4d","method":"POST","path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37788","PortSpecifier":{"PortValue":37788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965080,"nanos":293651958},"http":{"id":"006af1c0-44ba-403a-8581-d3e5017ece4d","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8re2IPsUSH3rl33S_UnHYL1Xi48KCdt4qVUO4NJoGT2BbbZF3lcQ26fdJ1GX"}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8re2IPsUSH3rl33S_UnHYL1Xi48KCdt4qVUO4NJoGT2BbbZF3lcQ26fdJ1GX\"}"}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0b74bb0-8f30-4d41-a479-822df81f96db","keyName":"e2e-rate-a-1d4512","subscription":"e2e-rate-iso-a-1d4512","tenant":"e2e-shared-a-714452","userId":"d0b74bb0-8f30-4d41-a479-822df81f96db","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\",\"requestedSubscription\":\"e2e-rate-iso-a-1d4512\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d4512","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1d4512"}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d0b74bb0-8f30-4d41-a479-822df81f96db","keyName":"e2e-rate-a-1d4512","selected_subscription":"e2e-rate-iso-a-1d4512","selected_subscription_key":"ai-tenant-e2e-shared-a-714452/e2e-rate-iso-a-1d4512@ai-tenant-e2e-shared-a-714452/rate-test-model-714452","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d4512","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"006af1c0-44ba-403a-8581-d3e5017ece4d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37798","PortSpecifier":{"PortValue":37798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"526b4a30-0200-46d3-a4bc-9d474ac45257","method":"POST","path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37798","PortSpecifier":{"PortValue":37798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965081,"nanos":361650894},"http":{"id":"526b4a30-0200-46d3-a4bc-9d474ac45257","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8re2IPsUSH3rl33S_UnHYL1Xi48KCdt4qVUO4NJoGT2BbbZF3lcQ26fdJ1GX"}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8re2IPsUSH3rl33S_UnHYL1Xi48KCdt4qVUO4NJoGT2BbbZF3lcQ26fdJ1GX\"}"}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0b74bb0-8f30-4d41-a479-822df81f96db","keyName":"e2e-rate-a-1d4512","subscription":"e2e-rate-iso-a-1d4512","tenant":"e2e-shared-a-714452","userId":"d0b74bb0-8f30-4d41-a479-822df81f96db","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\",\"requestedSubscription\":\"e2e-rate-iso-a-1d4512\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d4512","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1d4512"}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d0b74bb0-8f30-4d41-a479-822df81f96db","keyName":"e2e-rate-a-1d4512","selected_subscription":"e2e-rate-iso-a-1d4512","selected_subscription_key":"ai-tenant-e2e-shared-a-714452/e2e-rate-iso-a-1d4512@ai-tenant-e2e-shared-a-714452/rate-test-model-714452","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d4512","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T17:51:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526b4a30-0200-46d3-a4bc-9d474ac45257","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d916900-60d2-4012-b815-0dc75812fecc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37800","PortSpecifier":{"PortValue":37800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d916900-60d2-4012-b815-0dc75812fecc","method":"POST","path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d916900-60d2-4012-b815-0dc75812fecc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37800","PortSpecifier":{"PortValue":37800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965082,"nanos":400493639},"http":{"id":"3d916900-60d2-4012-b815-0dc75812fecc","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8re2IPsUSH3rl33S_UnHYL1Xi48KCdt4qVUO4NJoGT2BbbZF3lcQ26fdJ1GX"}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8re2IPsUSH3rl33S_UnHYL1Xi48KCdt4qVUO4NJoGT2BbbZF3lcQ26fdJ1GX\"}"}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0b74bb0-8f30-4d41-a479-822df81f96db","keyName":"e2e-rate-a-1d4512","subscription":"e2e-rate-iso-a-1d4512","tenant":"e2e-shared-a-714452","userId":"d0b74bb0-8f30-4d41-a479-822df81f96db","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\",\"requestedSubscription\":\"e2e-rate-iso-a-1d4512\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d4512","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d916900-60d2-4012-b815-0dc75812fecc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1d4512"}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d916900-60d2-4012-b815-0dc75812fecc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d0b74bb0-8f30-4d41-a479-822df81f96db","keyName":"e2e-rate-a-1d4512","selected_subscription":"e2e-rate-iso-a-1d4512","selected_subscription_key":"ai-tenant-e2e-shared-a-714452/e2e-rate-iso-a-1d4512@ai-tenant-e2e-shared-a-714452/rate-test-model-714452","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d4512","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d916900-60d2-4012-b815-0dc75812fecc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T17:51:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d916900-60d2-4012-b815-0dc75812fecc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55458","PortSpecifier":{"PortValue":55458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55458","PortSpecifier":{"PortValue":55458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965095,"nanos":319613159},"http":{"id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"278806fc-ddba-486b-8a4f-c6d5a80a2d1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52272","PortSpecifier":{"PortValue":52272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52272","PortSpecifier":{"PortValue":52272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965095,"nanos":357473988},"http":{"id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"54029952-54d8-40ca-af4e-07e776923192","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"]}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/baf459acf705"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d743a5c0-160c-4318-8ca9-3a4154e8839a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"54029952-54d8-40ca-af4e-07e776923192","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89cddb2b-4214-4a03-ba4e-e54587161a5b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55466","PortSpecifier":{"PortValue":55466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","method":"POST","path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55466","PortSpecifier":{"PortValue":55466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965095,"nanos":396838079},"http":{"id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Bj8oea0U9sgX7maw_fQmAeMj0hT9G33fOGtSzeIRUPsUv0BSCFk0RgxAhfzz"}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Bj8oea0U9sgX7maw_fQmAeMj0hT9G33fOGtSzeIRUPsUv0BSCFk0RgxAhfzz\"}"}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","keyName":"e2e-rate-a-e5e3cd","subscription":"e2e-rate-iso-a-e5e3cd","tenant":"e2e-shared-a-714452","userId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\",\"requestedSubscription\":\"e2e-rate-iso-a-e5e3cd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e5e3cd","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e5e3cd"}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","keyName":"e2e-rate-a-e5e3cd","selected_subscription":"e2e-rate-iso-a-e5e3cd","selected_subscription_key":"ai-tenant-e2e-shared-a-714452/e2e-rate-iso-a-e5e3cd@ai-tenant-e2e-shared-a-714452/rate-test-model-714452","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e5e3cd","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T17:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0387f560-d503-47d6-acb6-f5ef1f1cc652","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55478","PortSpecifier":{"PortValue":55478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"352d8a79-00e5-448b-b22d-28a22744ab82","method":"POST","path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55478","PortSpecifier":{"PortValue":55478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965096,"nanos":436959269},"http":{"id":"352d8a79-00e5-448b-b22d-28a22744ab82","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Bj8oea0U9sgX7maw_fQmAeMj0hT9G33fOGtSzeIRUPsUv0BSCFk0RgxAhfzz"}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Bj8oea0U9sgX7maw_fQmAeMj0hT9G33fOGtSzeIRUPsUv0BSCFk0RgxAhfzz\"}"}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","keyName":"e2e-rate-a-e5e3cd","subscription":"e2e-rate-iso-a-e5e3cd","tenant":"e2e-shared-a-714452","userId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\",\"requestedSubscription\":\"e2e-rate-iso-a-e5e3cd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e5e3cd","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e5e3cd"}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","keyName":"e2e-rate-a-e5e3cd","selected_subscription":"e2e-rate-iso-a-e5e3cd","selected_subscription_key":"ai-tenant-e2e-shared-a-714452/e2e-rate-iso-a-e5e3cd@ai-tenant-e2e-shared-a-714452/rate-test-model-714452","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e5e3cd","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T17:51:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"352d8a79-00e5-448b-b22d-28a22744ab82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55488","PortSpecifier":{"PortValue":55488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a29ec33-5595-49fe-8372-6a070a19d25d","method":"POST","path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions","host":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55488","PortSpecifier":{"PortValue":55488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965097,"nanos":469713920},"http":{"id":"6a29ec33-5595-49fe-8372-6a070a19d25d","method":"POST","headers":{":authority":"e2e-shared-a-714452.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-714452/rate-test-model-714452/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Bj8oea0U9sgX7maw_fQmAeMj0hT9G33fOGtSzeIRUPsUv0BSCFk0RgxAhfzz"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Bj8oea0U9sgX7maw_fQmAeMj0hT9G33fOGtSzeIRUPsUv0BSCFk0RgxAhfzz\"}"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","keyName":"e2e-rate-a-e5e3cd","subscription":"e2e-rate-iso-a-e5e3cd","tenant":"e2e-shared-a-714452","userId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\",\"requestedSubscription\":\"e2e-rate-iso-a-e5e3cd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-714452.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e5e3cd","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-714452/rate-test-model-714452\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e5e3cd"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"73d09a5b-fba8-4cca-af45-30eaf51026a4","keyName":"e2e-rate-a-e5e3cd","selected_subscription":"e2e-rate-iso-a-e5e3cd","selected_subscription_key":"ai-tenant-e2e-shared-a-714452/e2e-rate-iso-a-e5e3cd@ai-tenant-e2e-shared-a-714452/rate-test-model-714452","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-714452","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e5e3cd","namespace":"ai-tenant-e2e-shared-a-714452","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a29ec33-5595-49fe-8372-6a070a19d25d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8781d668-fd6d-4c43-a381-764142b925b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52282","PortSpecifier":{"PortValue":52282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8781d668-fd6d-4c43-a381-764142b925b4","method":"POST","path":"/ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784/v1/completions","host":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8781d668-fd6d-4c43-a381-764142b925b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52282","PortSpecifier":{"PortValue":52282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965097,"nanos":503271348},"http":{"id":"8781d668-fd6d-4c43-a381-764142b925b4","method":"POST","headers":{":authority":"e2e-shared-b-31a784.apps.0633c321-988d-499b-b277-baf459acf705.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XvWs5S5VfTncuPgv_sYFMu2WuzIBNpdNsto9lwDV6uidLWzKqjjsVx8DDKYT"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XvWs5S5VfTncuPgv_sYFMu2WuzIBNpdNsto9lwDV6uidLWzKqjjsVx8DDKYT\"}"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0819bf45-b998-4342-8c0a-03022460ddcc","keyName":"e2e-rate-b-e5e3cd","subscription":"e2e-rate-iso-b-e5e3cd","tenant":"e2e-shared-b-31a784","userId":"0819bf45-b998-4342-8c0a-03022460ddcc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784\",\"requestedSubscription\":\"e2e-rate-iso-b-e5e3cd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-31a784.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-31a784","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e5e3cd","namespace":"ai-tenant-e2e-shared-b-31a784","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8781d668-fd6d-4c43-a381-764142b925b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e5e3cd"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8781d668-fd6d-4c43-a381-764142b925b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0819bf45-b998-4342-8c0a-03022460ddcc","keyName":"e2e-rate-b-e5e3cd","selected_subscription":"e2e-rate-iso-b-e5e3cd","selected_subscription_key":"ai-tenant-e2e-shared-b-31a784/e2e-rate-iso-b-e5e3cd@ai-tenant-e2e-shared-b-31a784/rate-test-model-31a784","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-31a784","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e5e3cd","namespace":"ai-tenant-e2e-shared-b-31a784","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8781d668-fd6d-4c43-a381-764142b925b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T17:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8781d668-fd6d-4c43-a381-764142b925b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/488c368211bfa80a14fd65fa3487b206ed3aed16a3b4af37f8fd9082654148a8"}
{"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7f64a9774c859c6b8b21b204d0dba501a97fffb22011ab39221b4c81001eb76"}
{"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cc0a6bda77a059183bf62904dace5d1545da974ebf1378c3578b7ccb9d6aa17"}
{"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef784c743cd79c9977e1e6ba16d879069a35e4892fc9a85cbc037ba4f22d340d"}
{"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bea80837d07980279092af939b5a967e231fb6bbd9205e06af7f775e7d26ce9a"}
{"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bc6ab7d0cd64c0e3c3f2afdf989e565315302af645696406b707f4efe1339ea"}
{"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfd5b0c40b167d797dedabd3fffcd332c12bdd6d0f1ddb728099a383c05293c2"}
{"level":"info","ts":"2026-07-13T17:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1e90f327113f8ea9729b952af5212681a9b9b0d835f1bb7ea48d8c3d1c4822d"}
{"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/013e9617076d91feb79f72ba4a51cac5a7db09148cc010610a8805a36a8d7f12"}
{"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/182775177c2daad513f1dcf61082785768d2aabf1de84a38483f1be56523df32"}
{"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cab41fb65368e83144431559521eb60275cfe276e44fa136c1b7ee4875ed11b"}
{"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faf7129059723e943863cb6c718ef27fc5bb0fd65a11239ca0d0957768d5cfa1"}
{"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdf6282e689381510a332d84bdbb41a62fef4547c0feb132443c953f523a3726"}
{"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de3ab8124a51e596c2e9355537e869fb87072a3d03bbb08928502306a6909918"}
{"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3a0b773fb14df6332b1c67115e7313bb01599924c6c22e0846ae9e047aa107d"}
{"level":"info","ts":"2026-07-13T17:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1790964f2c00436fbe6c3120f3e783a20e3125b0a5c60aeaa059c2fd0d968ee5"}
{"level":"info","ts":"2026-07-13T17:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/735ea9d9da5b600a444ac0473a1a316e010212cfc3582cfcc9d3aba6d24489ef"}
{"level":"info","ts":"2026-07-13T17:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58ca2240da2914b5b052039d6ac9676215337b0a1d85cec1662f5ea768a346e1"}
{"level":"info","ts":"2026-07-13T17:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f4d0c73c89e4b229f4208404bc5d8fc6786172bff0b1085e1fe45cdd0e3e90c"}
{"level":"info","ts":"2026-07-13T17:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea3796478ce6525037cf89e51e1446d837346a52f5187a3739e2faa28c9c88fd"}
{"level":"info","ts":"2026-07-13T17:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff37f9695f9e9aedc658e8b13d31b46d8091f39683070f68ad2b6168c802fc28"}
{"level":"info","ts":"2026-07-13T17:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e04db550e1f90497000fbacbbfd3d57266bc6a2e3b3033ee3176659793593b5"}
{"level":"info","ts":"2026-07-13T17:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a0956c602d3f4e09c2f3ff0807cd4d73d54d3191490f40493339d378d852efe"}
{"level":"info","ts":"2026-07-13T17:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99e8e5c172ebb66e173b8982d94eb595d6df737aa41552702ee4b1e5b4a21443"}