{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:09:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"}
{"level":"info","ts":"2026-07-15T16:09:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041"}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"error","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4"}
{"level":"info","ts":"2026-07-15T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1"}
{"level":"debug","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"}
{"level":"info","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"}
{"level":"debug","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041"}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5"}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"error","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T16:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8"}
{"level":"error","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"}
{"level":"info","ts":"2026-07-15T16:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"}
{"level":"debug","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"}
{"level":"debug","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79"}
{"level":"debug","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494"}
{"level":"debug","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf"}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e"}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f"}
{"level":"info","ts":"2026-07-15T16:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55"}
{"level":"info","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44832","PortSpecifier":{"PortValue":44832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44832","PortSpecifier":{"PortValue":44832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131841,"nanos":758286113},"http":{"id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f95ead3e-95dc-42d0-a6fc-20b71defd018","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48250","PortSpecifier":{"PortValue":48250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60a280a9-0138-4cc9-9c11-36b560ee4436","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48250","PortSpecifier":{"PortValue":48250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131841,"nanos":800644957},"http":{"id":"60a280a9-0138-4cc9-9c11-36b560ee4436","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60a280a9-0138-4cc9-9c11-36b560ee4436","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44848","PortSpecifier":{"PortValue":44848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86965ef8-d27f-42b1-940f-b9a695291c12","method":"POST","path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44848","PortSpecifier":{"PortValue":44848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131841,"nanos":843144147},"http":{"id":"86965ef8-d27f-42b1-940f-b9a695291c12","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PttDmeX6e7v7kKN8_CBgRZAEs1KyevqxpUzV9w1hLCxQ8156g9ZWg1GhGmvW"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PttDmeX6e7v7kKN8_CBgRZAEs1KyevqxpUzV9w1hLCxQ8156g9ZWg1GhGmvW\"}"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2a168d46-a4af-440c-884f-0bedc98be28b","keyName":"e2e-rate-a-412036","subscription":"e2e-rate-iso-a-412036","tenant":"e2e-shared-a-0e8a6d","userId":"2a168d46-a4af-440c-884f-0bedc98be28b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\",\"requestedSubscription\":\"e2e-rate-iso-a-412036\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-412036","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-412036"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2a168d46-a4af-440c-884f-0bedc98be28b","keyName":"e2e-rate-a-412036","selected_subscription":"e2e-rate-iso-a-412036","selected_subscription_key":"ai-tenant-e2e-shared-a-0e8a6d/e2e-rate-iso-a-412036@ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-412036","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86965ef8-d27f-42b1-940f-b9a695291c12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58900","PortSpecifier":{"PortValue":58900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","method":"POST","path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58900","PortSpecifier":{"PortValue":58900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131842,"nanos":905189608},"http":{"id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PttDmeX6e7v7kKN8_CBgRZAEs1KyevqxpUzV9w1hLCxQ8156g9ZWg1GhGmvW"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PttDmeX6e7v7kKN8_CBgRZAEs1KyevqxpUzV9w1hLCxQ8156g9ZWg1GhGmvW\"}"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2a168d46-a4af-440c-884f-0bedc98be28b","keyName":"e2e-rate-a-412036","subscription":"e2e-rate-iso-a-412036","tenant":"e2e-shared-a-0e8a6d","userId":"2a168d46-a4af-440c-884f-0bedc98be28b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\",\"requestedSubscription\":\"e2e-rate-iso-a-412036\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-412036","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-412036"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2a168d46-a4af-440c-884f-0bedc98be28b","keyName":"e2e-rate-a-412036","selected_subscription":"e2e-rate-iso-a-412036","selected_subscription_key":"ai-tenant-e2e-shared-a-0e8a6d/e2e-rate-iso-a-412036@ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-412036","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89b50fd0-2e57-4d2c-b27f-f374b62ef4ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58916","PortSpecifier":{"PortValue":58916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c99d1e9b-ed69-483b-a945-d0c847d769da","method":"POST","path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58916","PortSpecifier":{"PortValue":58916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131843,"nanos":944266470},"http":{"id":"c99d1e9b-ed69-483b-a945-d0c847d769da","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PttDmeX6e7v7kKN8_CBgRZAEs1KyevqxpUzV9w1hLCxQ8156g9ZWg1GhGmvW"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PttDmeX6e7v7kKN8_CBgRZAEs1KyevqxpUzV9w1hLCxQ8156g9ZWg1GhGmvW\"}"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2a168d46-a4af-440c-884f-0bedc98be28b","keyName":"e2e-rate-a-412036","subscription":"e2e-rate-iso-a-412036","tenant":"e2e-shared-a-0e8a6d","userId":"2a168d46-a4af-440c-884f-0bedc98be28b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\",\"requestedSubscription\":\"e2e-rate-iso-a-412036\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-412036","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-412036"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2a168d46-a4af-440c-884f-0bedc98be28b","keyName":"e2e-rate-a-412036","selected_subscription":"e2e-rate-iso-a-412036","selected_subscription_key":"ai-tenant-e2e-shared-a-0e8a6d/e2e-rate-iso-a-412036@ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-412036","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c99d1e9b-ed69-483b-a945-d0c847d769da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39270","PortSpecifier":{"PortValue":39270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"719e9121-1410-4ea2-95b8-0dd015666a5c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39270","PortSpecifier":{"PortValue":39270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131856,"nanos":883264334},"http":{"id":"719e9121-1410-4ea2-95b8-0dd015666a5c","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"719e9121-1410-4ea2-95b8-0dd015666a5c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8630b9d0-a856-45ef-8be7-26702a124932","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57976","PortSpecifier":{"PortValue":57976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8630b9d0-a856-45ef-8be7-26702a124932","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8630b9d0-a856-45ef-8be7-26702a124932","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57976","PortSpecifier":{"PortValue":57976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131856,"nanos":923677468},"http":{"id":"8630b9d0-a856-45ef-8be7-26702a124932","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8630b9d0-a856-45ef-8be7-26702a124932","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"]}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8630b9d0-a856-45ef-8be7-26702a124932","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd691463f72d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6017b9ea-fe17-425e-b728-814d37c8760a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f3da05b1-1d81-48ca-9bff-cd016c24a2b2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8630b9d0-a856-45ef-8be7-26702a124932","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8630b9d0-a856-45ef-8be7-26702a124932","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8630b9d0-a856-45ef-8be7-26702a124932","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39280","PortSpecifier":{"PortValue":39280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"816468d6-c016-4b14-942c-2512f16c9ea3","method":"POST","path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39280","PortSpecifier":{"PortValue":39280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131856,"nanos":959610684},"http":{"id":"816468d6-c016-4b14-942c-2512f16c9ea3","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iRZ9cBA3cfww5nqV_Sj047wayfLHJ8CObID9vOhmOYpM7ylSnkP7K5am8qb5"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iRZ9cBA3cfww5nqV_Sj047wayfLHJ8CObID9vOhmOYpM7ylSnkP7K5am8qb5\"}"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","keyName":"e2e-rate-a-c4865b","subscription":"e2e-rate-iso-a-c4865b","tenant":"e2e-shared-a-0e8a6d","userId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\",\"requestedSubscription\":\"e2e-rate-iso-a-c4865b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4865b","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4865b"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","keyName":"e2e-rate-a-c4865b","selected_subscription":"e2e-rate-iso-a-c4865b","selected_subscription_key":"ai-tenant-e2e-shared-a-0e8a6d/e2e-rate-iso-a-c4865b@ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4865b","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"816468d6-c016-4b14-942c-2512f16c9ea3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39284","PortSpecifier":{"PortValue":39284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","method":"POST","path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39284","PortSpecifier":{"PortValue":39284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131857,"nanos":998301907},"http":{"id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iRZ9cBA3cfww5nqV_Sj047wayfLHJ8CObID9vOhmOYpM7ylSnkP7K5am8qb5"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iRZ9cBA3cfww5nqV_Sj047wayfLHJ8CObID9vOhmOYpM7ylSnkP7K5am8qb5\"}"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","keyName":"e2e-rate-a-c4865b","subscription":"e2e-rate-iso-a-c4865b","tenant":"e2e-shared-a-0e8a6d","userId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\",\"requestedSubscription\":\"e2e-rate-iso-a-c4865b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4865b","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4865b"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","keyName":"e2e-rate-a-c4865b","selected_subscription":"e2e-rate-iso-a-c4865b","selected_subscription_key":"ai-tenant-e2e-shared-a-0e8a6d/e2e-rate-iso-a-c4865b@ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4865b","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad194d74-42d8-48c8-9a3f-59e90aeca4f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57f884b6-6275-487c-a57f-23406ef311e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39288","PortSpecifier":{"PortValue":39288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57f884b6-6275-487c-a57f-23406ef311e6","method":"POST","path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions","host":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57f884b6-6275-487c-a57f-23406ef311e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39288","PortSpecifier":{"PortValue":39288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131859,"nanos":38001983},"http":{"id":"57f884b6-6275-487c-a57f-23406ef311e6","method":"POST","headers":{":authority":"e2e-shared-a-0e8a6d.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iRZ9cBA3cfww5nqV_Sj047wayfLHJ8CObID9vOhmOYpM7ylSnkP7K5am8qb5"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iRZ9cBA3cfww5nqV_Sj047wayfLHJ8CObID9vOhmOYpM7ylSnkP7K5am8qb5\"}"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","keyName":"e2e-rate-a-c4865b","subscription":"e2e-rate-iso-a-c4865b","tenant":"e2e-shared-a-0e8a6d","userId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\",\"requestedSubscription\":\"e2e-rate-iso-a-c4865b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0e8a6d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4865b","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57f884b6-6275-487c-a57f-23406ef311e6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0e8a6d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4865b"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57f884b6-6275-487c-a57f-23406ef311e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e22d3e7-ff66-46b1-a46a-5f544b5b5bbd","keyName":"e2e-rate-a-c4865b","selected_subscription":"e2e-rate-iso-a-c4865b","selected_subscription_key":"ai-tenant-e2e-shared-a-0e8a6d/e2e-rate-iso-a-c4865b@ai-tenant-e2e-shared-a-0e8a6d/rate-test-model-0e8a6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0e8a6d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4865b","namespace":"ai-tenant-e2e-shared-a-0e8a6d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57f884b6-6275-487c-a57f-23406ef311e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57f884b6-6275-487c-a57f-23406ef311e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57984","PortSpecifier":{"PortValue":57984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","method":"POST","path":"/ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615/v1/completions","host":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57984","PortSpecifier":{"PortValue":57984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784131859,"nanos":69273495},"http":{"id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","method":"POST","headers":{":authority":"e2e-shared-b-bcb615.apps.286cdf9e-8afc-46bd-915e-dd691463f72d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-100ZnGaMMT3TSakbr_Y0QSSOQCSj7c7ryKs8IqQhx6xOdeMdUwJ5QSpRDX9Pu"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-100ZnGaMMT3TSakbr_Y0QSSOQCSj7c7ryKs8IqQhx6xOdeMdUwJ5QSpRDX9Pu\"}"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ad50c08-06ef-472f-90a4-6b0cee15fa3b","keyName":"e2e-rate-b-c4865b","subscription":"e2e-rate-iso-b-c4865b","tenant":"e2e-shared-b-bcb615","userId":"7ad50c08-06ef-472f-90a4-6b0cee15fa3b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615\",\"requestedSubscription\":\"e2e-rate-iso-b-c4865b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bcb615.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bcb615","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c4865b","namespace":"ai-tenant-e2e-shared-b-bcb615","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bcb615/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c4865b"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7ad50c08-06ef-472f-90a4-6b0cee15fa3b","keyName":"e2e-rate-b-c4865b","selected_subscription":"e2e-rate-iso-b-c4865b","selected_subscription_key":"ai-tenant-e2e-shared-b-bcb615/e2e-rate-iso-b-c4865b@ai-tenant-e2e-shared-b-bcb615/rate-test-model-bcb615","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bcb615","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c4865b","namespace":"ai-tenant-e2e-shared-b-bcb615","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T16:10:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"472b647e-5c12-4dee-bbe3-f40771bcf77e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3a5baf93e98449d734fb54100f0e8580aba70d2f0666ae328bf365818d230a8"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccafbc1819e123e6cda93e472e732ff459507d5c932efc905881994795b14a94"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3f99c090d739e0c56f8faa6d45befc30753e3dc07fccb2ccb96a8dfacbf9d55"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/449c97f615beb69735d60c7967bc1e958e24cb2872a472c73bc75e810317fd13"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f6e0aa019d3ce2b3ffffa96befe630cdd48a279aab04d2db5be58dc8cd45cea"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/307d94b2aba5b7d48f7460f952bf50014cdf0e2b24b37469fc1544eda6a4b184"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e46de8a0296359eaa029ca5aa0b5b944828e48caad4e79ec9fb377f74ecceaf4"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7c1f19979aa5276ab5c5c0df4a03d3034ffdcf093b2ba904608fba91fa852de"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62b3a3c0811ab4bb01d433d884582e33afd22c668960a3bd94f4f0bbd023d107"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6220a94684169ee99316646661ab07c2dcc2a42fbf6b175a999de0179cef71f"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc1cd9c7d7478ff0b218605b93b40a30f63fec05ca4696c63d8a0f4b16cb9041"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55666192145717362f2d1552d8ca3fbca48a0cc26d10d611736166b1e6dcef6e"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e075a79e6ae921114e78cf7c5d488b1f3071427e07a3b500fa12d6b9db66f778"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbb105ff07b5a5cf4490354943fee959aafb68a2bace71f229834e37d683d89c"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a29a473e1a1b3c113641fc94287f270de788b5296930a4cc61eb2b6a89bd4b1"}
{"level":"info","ts":"2026-07-15T16:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0c225c77099a7beade87bd7d2c3fb366e08d0f2d4cc300017aa2cfd3df340f8"}
{"level":"info","ts":"2026-07-15T16:11:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2f8516558d95848e12715578af79564f67e71c04615fe0d029ad9153ebc4eb5"}
{"level":"info","ts":"2026-07-15T16:11:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f69cdc817793f8c66f6f47884eb6e3762b09df7f5f9f77c399ae38b8f718bdf"}
{"level":"info","ts":"2026-07-15T16:11:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa45557befea41fb72077d5dd6d5ace3a1e972da56e41ba5161bfc9275b62379"}
{"level":"info","ts":"2026-07-15T16:11:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ab135e72257e2f028d43236dd400eb6de3bed349a9d986bda9a2b3746fded79"}
{"level":"info","ts":"2026-07-15T16:11:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a286f8828ce237f18633c53d07d2942e54b14a285cd0bf1619f4408ff0211a80"}
{"level":"info","ts":"2026-07-15T16:12:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a74f2f0a8e2de6bcd4a5fb671caa5a672841caec0a5f305a22c8c6ba99b902f"}
{"level":"info","ts":"2026-07-15T16:12:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb8c1f7de970c013d7092eb860d5cf9c52a7b633ecdf79ed50ff561ca5775494"}
{"level":"info","ts":"2026-07-15T16:12:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/090747d76fee9d87a89114c5b3bacabbfbdb4d412afcd38ed36112294b6899d6"}