--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-10T02:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbe9f2285113e2eb92d508ac072a939660b529306d40466c2273531df280a7c7"}
{"level":"info","ts":"2026-07-10T02:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11f1622e4d5bbfc08380dc413223ee48740ad2d9d8af975be303bc12b3ceada4"}
{"level":"info","ts":"2026-07-10T02:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/724a1df80b123dbcaa2bc65e87c08ddb22fa3da395fa87d3d1c3c842cc257bb6"}
{"level":"info","ts":"2026-07-10T02:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10ba7aa742a074f33a1a2b4e0f7752267adf9e48101382486322d118c178d008"}
{"level":"info","ts":"2026-07-10T02:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b22d69dfa5cc08e9cdd40564cc4297561ac0dc6930812d7bb4d84210f894f0b0"}
{"level":"info","ts":"2026-07-10T02:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60c42b9e95500ab0d385aee9d480ceaa559c5c3ac9de830443844b43e297408f"}
{"level":"info","ts":"2026-07-10T02:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4839bdd6e8c302b43180b357cd9e082a8cb3ad4c61e1ebeb3999e64ac2813382"}
{"level":"info","ts":"2026-07-10T02:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc08190c46629797b7b2638fb1439684af2b9855df83fb9f0dced570eebf5c81"}
{"level":"info","ts":"2026-07-10T02:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cc96de275bd928ce1a19770cbbf2d552fc4e668907848f3dc2c5f48017fb0ff"}
{"level":"info","ts":"2026-07-10T02:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c730470bbf1c354efa9f33da8ef07c571c13d31e666981a6b87acc51508de827"}
{"level":"info","ts":"2026-07-10T02:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/403a51a4b7fd17e5dc4618d5308ba6a0f74a78c1bc41f7b86bd3ba6a590c30bf"}
{"level":"info","ts":"2026-07-10T02:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57a7ef3c3489e4fb4a79494b2365c5ff0760f75d697ed8d401e25d40564faf06"}
{"level":"debug","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2"}
{"level":"info","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2"}
{"level":"info","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2"}
{"level":"debug","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727"}
{"level":"debug","ts":"2026-07-10T02:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727"}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2"}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727"}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325"}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727"}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325"}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727"}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325"}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd"}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd"}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd"}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd"}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ef0998fb28c8ba5664e3bbc83eed08b3a6416e320b0b360ae266df54e10a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ef0998fb28c8ba5664e3bbc83eed08b3a6416e320b0b360ae266df54e10a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ef0998fb28c8ba5664e3bbc83eed08b3a6416e320b0b360ae266df54e10a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ef0998fb28c8ba5664e3bbc83eed08b3a6416e320b0b360ae266df54e10a2d"}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ef0998fb28c8ba5664e3bbc83eed08b3a6416e320b0b360ae266df54e10a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2ef0998fb28c8ba5664e3bbc83eed08b3a6416e320b0b360ae266df54e10a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2ef0998fb28c8ba5664e3bbc83eed08b3a6416e320b0b360ae266df54e10a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2ef0998fb28c8ba5664e3bbc83eed08b3a6416e320b0b360ae266df54e10a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ef0998fb28c8ba5664e3bbc83eed08b3a6416e320b0b360ae266df54e10a2d"}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2ef0998fb28c8ba5664e3bbc83eed08b3a6416e320b0b360ae266df54e10a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2ef0998fb28c8ba5664e3bbc83eed08b3a6416e320b0b360ae266df54e10a2d"}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0"}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762"}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762"}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:55:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762"}
{"level":"info","ts":"2026-07-10T02:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52307913bd2717ba3d9d3be7af4eb8f8c7613e2c88c56586e941e209beb4bedd"}
{"level":"info","ts":"2026-07-10T02:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08f7ba92e004483c9809fc4c5f345a6c4553e5c84ff010a222db7055f6b84727"}
{"level":"info","ts":"2026-07-10T02:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d61c6606f0af4fa184a7671764185c95dca036df22d3f051bc5c6277acbcb325"}
{"level":"info","ts":"2026-07-10T02:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4f3e9d2cafcfa157b93c1f61c06a939dc65751015397c7c4503ee00dbf085a2"}
{"level":"info","ts":"2026-07-10T02:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b66a2dedf714e96cd5faf3f2bf9a54bf86b584936eb24860824da5d182a40a0"}
{"level":"info","ts":"2026-07-10T02:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ce248e06220f4edd4e729a31fe2667b73366f34390ff4a208e26fec07241762"}
{"level":"info","ts":"2026-07-10T02:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd071f1bd3688dcb54cfbedfbb32a6ae003fb50000c41b53098840d331a06a9e"}
{"level":"info","ts":"2026-07-10T02:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2ef0998fb28c8ba5664e3bbc83eed08b3a6416e320b0b360ae266df54e10a2d"}
{"level":"debug","ts":"2026-07-10T02:56:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"}
{"level":"debug","ts":"2026-07-10T02:56:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"}
{"level":"debug","ts":"2026-07-10T02:56:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad"}
{"level":"error","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad"}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e0e5e24db77c4f6557c823ee6054b00e3f2e0ede97731dc7e5721c1deebe35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e0e5e24db77c4f6557c823ee6054b00e3f2e0ede97731dc7e5721c1deebe35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e0e5e24db77c4f6557c823ee6054b00e3f2e0ede97731dc7e5721c1deebe35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e0e5e24db77c4f6557c823ee6054b00e3f2e0ede97731dc7e5721c1deebe35"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e0e5e24db77c4f6557c823ee6054b00e3f2e0ede97731dc7e5721c1deebe35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e0e5e24db77c4f6557c823ee6054b00e3f2e0ede97731dc7e5721c1deebe35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e0e5e24db77c4f6557c823ee6054b00e3f2e0ede97731dc7e5721c1deebe35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e0e5e24db77c4f6557c823ee6054b00e3f2e0ede97731dc7e5721c1deebe35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72e8abe02a079471f1759c624ea524aeec4a66e9b7f1d292301277a7fe33bbc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e0e5e24db77c4f6557c823ee6054b00e3f2e0ede97731dc7e5721c1deebe35"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72e8abe02a079471f1759c624ea524aeec4a66e9b7f1d292301277a7fe33bbc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e0e5e24db77c4f6557c823ee6054b00e3f2e0ede97731dc7e5721c1deebe35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72e8abe02a079471f1759c624ea524aeec4a66e9b7f1d292301277a7fe33bbc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72e8abe02a079471f1759c624ea524aeec4a66e9b7f1d292301277a7fe33bbc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72e8abe02a079471f1759c624ea524aeec4a66e9b7f1d292301277a7fe33bbc2"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72e8abe02a079471f1759c624ea524aeec4a66e9b7f1d292301277a7fe33bbc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72e8abe02a079471f1759c624ea524aeec4a66e9b7f1d292301277a7fe33bbc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72e8abe02a079471f1759c624ea524aeec4a66e9b7f1d292301277a7fe33bbc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72e8abe02a079471f1759c624ea524aeec4a66e9b7f1d292301277a7fe33bbc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72e8abe02a079471f1759c624ea524aeec4a66e9b7f1d292301277a7fe33bbc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e0e5e24db77c4f6557c823ee6054b00e3f2e0ede97731dc7e5721c1deebe35"}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72e8abe02a079471f1759c624ea524aeec4a66e9b7f1d292301277a7fe33bbc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72e8abe02a079471f1759c624ea524aeec4a66e9b7f1d292301277a7fe33bbc2"}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a1b1a92e0d84c58581502ecf6c7ff8eecdf1a11680ccd0136410995d7324404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a1b1a92e0d84c58581502ecf6c7ff8eecdf1a11680ccd0136410995d7324404","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a1b1a92e0d84c58581502ecf6c7ff8eecdf1a11680ccd0136410995d7324404"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a1b1a92e0d84c58581502ecf6c7ff8eecdf1a11680ccd0136410995d7324404","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a1b1a92e0d84c58581502ecf6c7ff8eecdf1a11680ccd0136410995d7324404"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a1b1a92e0d84c58581502ecf6c7ff8eecdf1a11680ccd0136410995d7324404","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a1b1a92e0d84c58581502ecf6c7ff8eecdf1a11680ccd0136410995d7324404","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a1b1a92e0d84c58581502ecf6c7ff8eecdf1a11680ccd0136410995d7324404"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5"}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd"}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd"}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6245003add050242c002456de43353d1247e6144f4dbcca96daf972be4d479c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6245003add050242c002456de43353d1247e6144f4dbcca96daf972be4d479c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6245003add050242c002456de43353d1247e6144f4dbcca96daf972be4d479c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6245003add050242c002456de43353d1247e6144f4dbcca96daf972be4d479c"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6245003add050242c002456de43353d1247e6144f4dbcca96daf972be4d479c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6245003add050242c002456de43353d1247e6144f4dbcca96daf972be4d479c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6245003add050242c002456de43353d1247e6144f4dbcca96daf972be4d479c"}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6245003add050242c002456de43353d1247e6144f4dbcca96daf972be4d479c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6245003add050242c002456de43353d1247e6144f4dbcca96daf972be4d479c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6245003add050242c002456de43353d1247e6144f4dbcca96daf972be4d479c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6245003add050242c002456de43353d1247e6144f4dbcca96daf972be4d479c"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6245003add050242c002456de43353d1247e6144f4dbcca96daf972be4d479c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474"}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"}
{"level":"error","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2"}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2"}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"}
{"level":"info","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630"}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630"}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175"}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d"}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9639826c9517b4455a4020b80cd4ef7da634aea7d3b5f650d127f8a449f33851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9639826c9517b4455a4020b80cd4ef7da634aea7d3b5f650d127f8a449f33851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0529df244ca74643e7f91560b5df95e1c4c5a064927d2c0113b8e710cb72496c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9639826c9517b4455a4020b80cd4ef7da634aea7d3b5f650d127f8a449f33851"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0529df244ca74643e7f91560b5df95e1c4c5a064927d2c0113b8e710cb72496c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9639826c9517b4455a4020b80cd4ef7da634aea7d3b5f650d127f8a449f33851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9639826c9517b4455a4020b80cd4ef7da634aea7d3b5f650d127f8a449f33851"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9639826c9517b4455a4020b80cd4ef7da634aea7d3b5f650d127f8a449f33851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0529df244ca74643e7f91560b5df95e1c4c5a064927d2c0113b8e710cb72496c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0529df244ca74643e7f91560b5df95e1c4c5a064927d2c0113b8e710cb72496c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9639826c9517b4455a4020b80cd4ef7da634aea7d3b5f650d127f8a449f33851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0529df244ca74643e7f91560b5df95e1c4c5a064927d2c0113b8e710cb72496c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0529df244ca74643e7f91560b5df95e1c4c5a064927d2c0113b8e710cb72496c"}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0529df244ca74643e7f91560b5df95e1c4c5a064927d2c0113b8e710cb72496c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0529df244ca74643e7f91560b5df95e1c4c5a064927d2c0113b8e710cb72496c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0529df244ca74643e7f91560b5df95e1c4c5a064927d2c0113b8e710cb72496c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0529df244ca74643e7f91560b5df95e1c4c5a064927d2c0113b8e710cb72496c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9639826c9517b4455a4020b80cd4ef7da634aea7d3b5f650d127f8a449f33851"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b"}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0529df244ca74643e7f91560b5df95e1c4c5a064927d2c0113b8e710cb72496c"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e41e371551b5c73184a243ff7642e8162a77bf0d977ac595411aa89455be8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e41e371551b5c73184a243ff7642e8162a77bf0d977ac595411aa89455be8ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e41e371551b5c73184a243ff7642e8162a77bf0d977ac595411aa89455be8ab"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e41e371551b5c73184a243ff7642e8162a77bf0d977ac595411aa89455be8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e41e371551b5c73184a243ff7642e8162a77bf0d977ac595411aa89455be8ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e41e371551b5c73184a243ff7642e8162a77bf0d977ac595411aa89455be8ab"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e41e371551b5c73184a243ff7642e8162a77bf0d977ac595411aa89455be8ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e41e371551b5c73184a243ff7642e8162a77bf0d977ac595411aa89455be8ab"}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e41e371551b5c73184a243ff7642e8162a77bf0d977ac595411aa89455be8ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:56:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"}
{"level":"info","ts":"2026-07-10T02:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"}
{"level":"info","ts":"2026-07-10T02:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:56:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:56:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"}
{"level":"error","ts":"2026-07-10T02:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:56:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36088","PortSpecifier":{"PortValue":36088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","object":"source:{address:{socket_address:{address:\"10.132.0.12:36088\" port_value:36088}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652204 nanos:969192391} http:{id:\"015ec8a0-05bd-4b34-87d9-d66a8373f83c\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"015ec8a0-05bd-4b34-87d9-d66a8373f83c\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":969192391,"seconds":1783652204}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36088},"address":"10.132.0.12:36088"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":969192391,"seconds":1783652204},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:36088","port":36088}}}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/auth-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:56:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:56:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"015ec8a0-05bd-4b34-87d9-d66a8373f83c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47066","PortSpecifier":{"PortValue":47066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","object":"source:{address:{socket_address:{address:\"10.132.0.12:47066\" port_value:47066}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652205 nanos:26796269} http:{id:\"830b8ad3-87b1-421e-9d23-50ab708dfd12\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"830b8ad3-87b1-421e-9d23-50ab708dfd12\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"830b8ad3-87b1-421e-9d23-50ab708dfd12"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":26796269,"seconds":1783652205}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47066},"address":"10.132.0.12:47066"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"830b8ad3-87b1-421e-9d23-50ab708dfd12"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":26796269,"seconds":1783652205},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:47066","port":47066}}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/auth-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"830b8ad3-87b1-421e-9d23-50ab708dfd12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36098","PortSpecifier":{"PortValue":36098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","method":"GET","path":"/maas-api/v1/api-keys/1a3fc91d-ad6f-4f78-97c6-50b50819b383","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","object":"source:{address:{socket_address:{address:\"10.132.0.12:36098\" port_value:36098}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652205 nanos:84720556} http:{id:\"cfe796d1-6767-4bb0-a6b4-ba810659a435\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/1a3fc91d-ad6f-4f78-97c6-50b50819b383\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"cfe796d1-6767-4bb0-a6b4-ba810659a435\"} path:\"/maas-api/v1/api-keys/1a3fc91d-ad6f-4f78-97c6-50b50819b383\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1a3fc91d-ad6f-4f78-97c6-50b50819b383",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cfe796d1-6767-4bb0-a6b4-ba810659a435"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","method":"GET","path":"/maas-api/v1/api-keys/1a3fc91d-ad6f-4f78-97c6-50b50819b383","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":84720556,"seconds":1783652205}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36098},"address":"10.132.0.12:36098"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1a3fc91d-ad6f-4f78-97c6-50b50819b383",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cfe796d1-6767-4bb0-a6b4-ba810659a435"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","method":"GET","path":"/maas-api/v1/api-keys/1a3fc91d-ad6f-4f78-97c6-50b50819b383","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":84720556,"seconds":1783652205},"url_path":"/maas-api/v1/api-keys/1a3fc91d-ad6f-4f78-97c6-50b50819b383","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:36098","port":36098}}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/auth-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfe796d1-6767-4bb0-a6b4-ba810659a435","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b65e763f-82e0-49a9-861e-f41f457e70ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47072","PortSpecifier":{"PortValue":47072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b65e763f-82e0-49a9-861e-f41f457e70ca","method":"GET","path":"/maas-api/v1/api-keys/5f3cccf3-075d-47a2-a8b9-3e0f4e6cedd5","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b65e763f-82e0-49a9-861e-f41f457e70ca","object":"source:{address:{socket_address:{address:\"10.132.0.12:47072\" port_value:47072}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652205 nanos:119489569} http:{id:\"b65e763f-82e0-49a9-861e-f41f457e70ca\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/5f3cccf3-075d-47a2-a8b9-3e0f4e6cedd5\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"b65e763f-82e0-49a9-861e-f41f457e70ca\"} path:\"/maas-api/v1/api-keys/5f3cccf3-075d-47a2-a8b9-3e0f4e6cedd5\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b65e763f-82e0-49a9-861e-f41f457e70ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b65e763f-82e0-49a9-861e-f41f457e70ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b65e763f-82e0-49a9-861e-f41f457e70ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5f3cccf3-075d-47a2-a8b9-3e0f4e6cedd5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b65e763f-82e0-49a9-861e-f41f457e70ca"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"b65e763f-82e0-49a9-861e-f41f457e70ca","method":"GET","path":"/maas-api/v1/api-keys/5f3cccf3-075d-47a2-a8b9-3e0f4e6cedd5","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":119489569,"seconds":1783652205}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47072},"address":"10.132.0.12:47072"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5f3cccf3-075d-47a2-a8b9-3e0f4e6cedd5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b65e763f-82e0-49a9-861e-f41f457e70ca"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"b65e763f-82e0-49a9-861e-f41f457e70ca","method":"GET","path":"/maas-api/v1/api-keys/5f3cccf3-075d-47a2-a8b9-3e0f4e6cedd5","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":119489569,"seconds":1783652205},"url_path":"/maas-api/v1/api-keys/5f3cccf3-075d-47a2-a8b9-3e0f4e6cedd5","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:47072","port":47072}}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b65e763f-82e0-49a9-861e-f41f457e70ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b65e763f-82e0-49a9-861e-f41f457e70ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b65e763f-82e0-49a9-861e-f41f457e70ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/auth-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b65e763f-82e0-49a9-861e-f41f457e70ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b65e763f-82e0-49a9-861e-f41f457e70ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b65e763f-82e0-49a9-861e-f41f457e70ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b65e763f-82e0-49a9-861e-f41f457e70ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:56:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b65e763f-82e0-49a9-861e-f41f457e70ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56296","PortSpecifier":{"PortValue":56296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","object":"source:{address:{socket_address:{address:\"10.132.0.12:56296\" port_value:56296}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652217 nanos:907037972} http:{id:\"5c253cb9-697b-4661-ac73-6b3deadc1c92\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"5c253cb9-697b-4661-ac73-6b3deadc1c92\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5c253cb9-697b-4661-ac73-6b3deadc1c92"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":907037972,"seconds":1783652217}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":56296},"address":"10.132.0.12:56296"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5c253cb9-697b-4661-ac73-6b3deadc1c92"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":907037972,"seconds":1783652217},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:56296","port":56296}}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/auth-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c253cb9-697b-4661-ac73-6b3deadc1c92","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60794","PortSpecifier":{"PortValue":60794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","object":"source:{address:{socket_address:{address:\"10.132.0.12:60794\" port_value:60794}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652217 nanos:952701840} http:{id:\"c61f9db5-1a54-49a7-a416-2eb4b165ba32\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdC01NGM3Yzc4ZjQ3LWRxa2txCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"c61f9db5-1a54-49a7-a416-2eb4b165ba32\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":952701840,"seconds":1783652217}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60794},"address":"10.132.0.12:60794"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":952701840,"seconds":1783652217},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:60794","port":60794}}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/auth-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c61f9db5-1a54-49a7-a416-2eb4b165ba32","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56304","PortSpecifier":{"PortValue":56304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb70683c-38e0-42ea-913e-b879b830b7fb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","object":"source:{address:{socket_address:{address:\"10.132.0.12:56304\" port_value:56304}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652217 nanos:992219279} http:{id:\"eb70683c-38e0-42ea-913e-b879b830b7fb\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"eb70683c-38e0-42ea-913e-b879b830b7fb\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JjBBvR6UsGPLEn0q_3pF8IDQSnl5V1IiiU50FyfuwVRHKgFIojFiXWXuJuNc"}
{"level":"debug","ts":"2026-07-10T02:56:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T02:56:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ea45f21a-6014-4e34-bcca-1a012040d0d5","keyName":"e2e-auth-iso-a-d0f345","subscription":"e2e-auth-iso-29f4a0","tenant":"e2e-shared-a-1d77d1","userId":"ea45f21a-6014-4e34-bcca-1a012040d0d5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:56:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"eb70683c-38e0-42ea-913e-b879b830b7fb"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"eb70683c-38e0-42ea-913e-b879b830b7fb","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":992219279,"seconds":1783652217}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":56304},"address":"10.132.0.12:56304"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"eb70683c-38e0-42ea-913e-b879b830b7fb"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"eb70683c-38e0-42ea-913e-b879b830b7fb","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":992219279,"seconds":1783652217},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:56304","port":56304}}}
{"level":"debug","ts":"2026-07-10T02:56:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/auth-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:56:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-29f4a0"}
{"level":"debug","ts":"2026-07-10T02:56:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:56:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:56:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T02:56:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:56:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb70683c-38e0-42ea-913e-b879b830b7fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1734e172-783d-4a22-a85b-c2268afae1d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37048","PortSpecifier":{"PortValue":37048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1734e172-783d-4a22-a85b-c2268afae1d4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1734e172-783d-4a22-a85b-c2268afae1d4","object":"source:{address:{socket_address:{address:\"10.132.0.12:37048\" port_value:37048}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652240 nanos:79488188} http:{id:\"1734e172-783d-4a22-a85b-c2268afae1d4\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"1734e172-783d-4a22-a85b-c2268afae1d4\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1734e172-783d-4a22-a85b-c2268afae1d4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1734e172-783d-4a22-a85b-c2268afae1d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1734e172-783d-4a22-a85b-c2268afae1d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1734e172-783d-4a22-a85b-c2268afae1d4"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"1734e172-783d-4a22-a85b-c2268afae1d4","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":79488188,"seconds":1783652240}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37048},"address":"10.132.0.12:37048"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1734e172-783d-4a22-a85b-c2268afae1d4"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"1734e172-783d-4a22-a85b-c2268afae1d4","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":79488188,"seconds":1783652240},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:37048","port":37048}}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1734e172-783d-4a22-a85b-c2268afae1d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1734e172-783d-4a22-a85b-c2268afae1d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1734e172-783d-4a22-a85b-c2268afae1d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/auth-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1734e172-783d-4a22-a85b-c2268afae1d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1734e172-783d-4a22-a85b-c2268afae1d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1734e172-783d-4a22-a85b-c2268afae1d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1734e172-783d-4a22-a85b-c2268afae1d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1734e172-783d-4a22-a85b-c2268afae1d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35746","PortSpecifier":{"PortValue":35746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","object":"source:{address:{socket_address:{address:\"10.132.0.12:35746\" port_value:35746}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652240 nanos:115258664} http:{id:\"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdC01NGM3Yzc4ZjQ3LWRxa2txCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":115258664,"seconds":1783652240}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35746},"address":"10.132.0.12:35746"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":115258664,"seconds":1783652240},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:35746","port":35746}}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/auth-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce6ece70-a080-4f2d-b0bd-b2b37b64ef14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35750","PortSpecifier":{"PortValue":35750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba","object":"source:{address:{socket_address:{address:\"10.132.0.12:35750\" port_value:35750}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652240 nanos:150742818} http:{id:\"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C7NSlfwI5rhg55sL_puExsmtdr0iYCpfTLH9V7GzUZgYXpcXzDpxaOsbonIz"}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":150742818,"seconds":1783652240}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35750},"address":"10.132.0.12:35750"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":150742818,"seconds":1783652240},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:35750","port":35750}}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-10T02:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3db3d39e-13d0-4e02-94c4-dd9ed9ea9bba","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09eaa806-15d1-4e33-9f1d-518f49798b74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53822","PortSpecifier":{"PortValue":53822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09eaa806-15d1-4e33-9f1d-518f49798b74","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09eaa806-15d1-4e33-9f1d-518f49798b74","object":"source:{address:{socket_address:{address:\"10.132.0.12:53822\" port_value:53822}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652255 nanos:51818045} http:{id:\"09eaa806-15d1-4e33-9f1d-518f49798b74\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"09eaa806-15d1-4e33-9f1d-518f49798b74\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09eaa806-15d1-4e33-9f1d-518f49798b74","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09eaa806-15d1-4e33-9f1d-518f49798b74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09eaa806-15d1-4e33-9f1d-518f49798b74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"09eaa806-15d1-4e33-9f1d-518f49798b74"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"09eaa806-15d1-4e33-9f1d-518f49798b74","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":51818045,"seconds":1783652255}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53822},"address":"10.132.0.12:53822"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"09eaa806-15d1-4e33-9f1d-518f49798b74"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"09eaa806-15d1-4e33-9f1d-518f49798b74","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":51818045,"seconds":1783652255},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:53822","port":53822}}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09eaa806-15d1-4e33-9f1d-518f49798b74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09eaa806-15d1-4e33-9f1d-518f49798b74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09eaa806-15d1-4e33-9f1d-518f49798b74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/auth-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09eaa806-15d1-4e33-9f1d-518f49798b74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09eaa806-15d1-4e33-9f1d-518f49798b74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09eaa806-15d1-4e33-9f1d-518f49798b74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09eaa806-15d1-4e33-9f1d-518f49798b74","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09eaa806-15d1-4e33-9f1d-518f49798b74","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f06d006-b267-4fb5-a2ee-274141738d49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53954","PortSpecifier":{"PortValue":53954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f06d006-b267-4fb5-a2ee-274141738d49","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f06d006-b267-4fb5-a2ee-274141738d49","object":"source:{address:{socket_address:{address:\"10.132.0.12:53954\" port_value:53954}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652255 nanos:85680028} http:{id:\"9f06d006-b267-4fb5-a2ee-274141738d49\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdC01NGM3Yzc4ZjQ3LWRxa2txCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"9f06d006-b267-4fb5-a2ee-274141738d49\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f06d006-b267-4fb5-a2ee-274141738d49","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f06d006-b267-4fb5-a2ee-274141738d49","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f06d006-b267-4fb5-a2ee-274141738d49","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9f06d006-b267-4fb5-a2ee-274141738d49"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"9f06d006-b267-4fb5-a2ee-274141738d49","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":85680028,"seconds":1783652255}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53954},"address":"10.132.0.12:53954"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9f06d006-b267-4fb5-a2ee-274141738d49"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"9f06d006-b267-4fb5-a2ee-274141738d49","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":85680028,"seconds":1783652255},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:53954","port":53954}}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f06d006-b267-4fb5-a2ee-274141738d49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f06d006-b267-4fb5-a2ee-274141738d49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f06d006-b267-4fb5-a2ee-274141738d49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/auth-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f06d006-b267-4fb5-a2ee-274141738d49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f06d006-b267-4fb5-a2ee-274141738d49","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f06d006-b267-4fb5-a2ee-274141738d49","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f06d006-b267-4fb5-a2ee-274141738d49","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f06d006-b267-4fb5-a2ee-274141738d49","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53828","PortSpecifier":{"PortValue":53828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","object":"source:{address:{socket_address:{address:\"10.132.0.12:53828\" port_value:53828}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652255 nanos:120936801} http:{id:\"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/search\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"163\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f\"} path:\"/maas-api/v1/api-keys/search\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"163","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","method":"POST","path":"/maas-api/v1/api-keys/search","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":120936801,"seconds":1783652255}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53828},"address":"10.132.0.12:53828"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"163","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","method":"POST","path":"/maas-api/v1/api-keys/search","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":120936801,"seconds":1783652255},"url_path":"/maas-api/v1/api-keys/search","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:53828","port":53828}}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/auth-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe6f6bf4-02d8-4ff7-b852-7904bfe99f2f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53964","PortSpecifier":{"PortValue":53964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","object":"source:{address:{socket_address:{address:\"10.132.0.12:53964\" port_value:53964}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652255 nanos:165785963} http:{id:\"b48f59e7-9f92-436c-8a69-84503e68f6a1\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/search\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"163\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"b48f59e7-9f92-436c-8a69-84503e68f6a1\"} path:\"/maas-api/v1/api-keys/search\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"163","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b48f59e7-9f92-436c-8a69-84503e68f6a1"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","method":"POST","path":"/maas-api/v1/api-keys/search","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":165785963,"seconds":1783652255}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53964},"address":"10.132.0.12:53964"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"163","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b48f59e7-9f92-436c-8a69-84503e68f6a1"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","method":"POST","path":"/maas-api/v1/api-keys/search","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":165785963,"seconds":1783652255},"url_path":"/maas-api/v1/api-keys/search","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:53964","port":53964}}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/auth-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b48f59e7-9f92-436c-8a69-84503e68f6a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcaa4479-1329-4de7-ac83-001c8244f613","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35064","PortSpecifier":{"PortValue":35064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcaa4479-1329-4de7-ac83-001c8244f613","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcaa4479-1329-4de7-ac83-001c8244f613","object":"source:{address:{socket_address:{address:\"10.132.0.12:35064\" port_value:35064}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652267 nanos:936562856} http:{id:\"fcaa4479-1329-4de7-ac83-001c8244f613\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"fcaa4479-1329-4de7-ac83-001c8244f613\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fcaa4479-1329-4de7-ac83-001c8244f613","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcaa4479-1329-4de7-ac83-001c8244f613","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcaa4479-1329-4de7-ac83-001c8244f613","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fcaa4479-1329-4de7-ac83-001c8244f613"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"fcaa4479-1329-4de7-ac83-001c8244f613","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":936562856,"seconds":1783652267}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35064},"address":"10.132.0.12:35064"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fcaa4479-1329-4de7-ac83-001c8244f613"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"fcaa4479-1329-4de7-ac83-001c8244f613","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":936562856,"seconds":1783652267},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:35064","port":35064}}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcaa4479-1329-4de7-ac83-001c8244f613","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcaa4479-1329-4de7-ac83-001c8244f613","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcaa4479-1329-4de7-ac83-001c8244f613","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/auth-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fcaa4479-1329-4de7-ac83-001c8244f613","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcaa4479-1329-4de7-ac83-001c8244f613","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcaa4479-1329-4de7-ac83-001c8244f613","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcaa4479-1329-4de7-ac83-001c8244f613","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcaa4479-1329-4de7-ac83-001c8244f613","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56610","PortSpecifier":{"PortValue":56610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","object":"source:{address:{socket_address:{address:\"10.132.0.12:56610\" port_value:56610}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652267 nanos:976099945} http:{id:\"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdC01NGM3Yzc4ZjQ3LWRxa2txCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdC01NGM3Yzc4ZjQ3LWRxa2txCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":976099945,"seconds":1783652267}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":56610},"address":"10.132.0.12:56610"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":976099945,"seconds":1783652267},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:56610","port":56610}}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/auth-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bd6f8b6-9eff-4cf4-89bf-aa7bc68f8502","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d29ebaf4-92c4-4774-8716-223229de438f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56612","PortSpecifier":{"PortValue":56612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d29ebaf4-92c4-4774-8716-223229de438f","method":"GET","path":"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d29ebaf4-92c4-4774-8716-223229de438f","object":"source:{address:{socket_address:{address:\"10.132.0.12:56612\" port_value:56612}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652268 nanos:15697258} http:{id:\"d29ebaf4-92c4-4774-8716-223229de438f\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"d29ebaf4-92c4-4774-8716-223229de438f\"} path:\"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d29ebaf4-92c4-4774-8716-223229de438f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d29ebaf4-92c4-4774-8716-223229de438f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d29ebaf4-92c4-4774-8716-223229de438f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d29ebaf4-92c4-4774-8716-223229de438f"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"d29ebaf4-92c4-4774-8716-223229de438f","method":"GET","path":"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":15697258,"seconds":1783652268}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":56612},"address":"10.132.0.12:56612"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d29ebaf4-92c4-4774-8716-223229de438f"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"d29ebaf4-92c4-4774-8716-223229de438f","method":"GET","path":"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":15697258,"seconds":1783652268},"url_path":"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:56612","port":56612}}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d29ebaf4-92c4-4774-8716-223229de438f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d29ebaf4-92c4-4774-8716-223229de438f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d29ebaf4-92c4-4774-8716-223229de438f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/auth-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d29ebaf4-92c4-4774-8716-223229de438f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d29ebaf4-92c4-4774-8716-223229de438f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d29ebaf4-92c4-4774-8716-223229de438f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d29ebaf4-92c4-4774-8716-223229de438f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d29ebaf4-92c4-4774-8716-223229de438f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35078","PortSpecifier":{"PortValue":35078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","method":"GET","path":"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","object":"source:{address:{socket_address:{address:\"10.132.0.12:35078\" port_value:35078}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652268 nanos:49566549} http:{id:\"842adc70-0796-4c57-a8e3-e192c7a7d94d\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"842adc70-0796-4c57-a8e3-e192c7a7d94d\"} path:\"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"842adc70-0796-4c57-a8e3-e192c7a7d94d"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","method":"GET","path":"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":49566549,"seconds":1783652268}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35078},"address":"10.132.0.12:35078"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"842adc70-0796-4c57-a8e3-e192c7a7d94d"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","method":"GET","path":"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":49566549,"seconds":1783652268},"url_path":"/maas-api/v1/api-keys/d7e1a041-debf-4442-8a23-1befa825ab73","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:35078","port":35078}}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/auth-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:57:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"842adc70-0796-4c57-a8e3-e192c7a7d94d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aba9093c-7ae6-4714-9088-1468e364fb70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60706","PortSpecifier":{"PortValue":60706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aba9093c-7ae6-4714-9088-1468e364fb70","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aba9093c-7ae6-4714-9088-1468e364fb70","object":"source:{address:{socket_address:{address:\"10.132.0.12:60706\" port_value:60706}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652278 nanos:716826487} http:{id:\"aba9093c-7ae6-4714-9088-1468e364fb70\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"aba9093c-7ae6-4714-9088-1468e364fb70\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aba9093c-7ae6-4714-9088-1468e364fb70","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aba9093c-7ae6-4714-9088-1468e364fb70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aba9093c-7ae6-4714-9088-1468e364fb70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"aba9093c-7ae6-4714-9088-1468e364fb70"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"aba9093c-7ae6-4714-9088-1468e364fb70","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":716826487,"seconds":1783652278}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60706},"address":"10.132.0.12:60706"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"aba9093c-7ae6-4714-9088-1468e364fb70"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"aba9093c-7ae6-4714-9088-1468e364fb70","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":716826487,"seconds":1783652278},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:60706","port":60706}}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aba9093c-7ae6-4714-9088-1468e364fb70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aba9093c-7ae6-4714-9088-1468e364fb70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/auth-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aba9093c-7ae6-4714-9088-1468e364fb70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aba9093c-7ae6-4714-9088-1468e364fb70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aba9093c-7ae6-4714-9088-1468e364fb70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aba9093c-7ae6-4714-9088-1468e364fb70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aba9093c-7ae6-4714-9088-1468e364fb70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aba9093c-7ae6-4714-9088-1468e364fb70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59622","PortSpecifier":{"PortValue":59622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","object":"source:{address:{socket_address:{address:\"10.132.0.12:59622\" port_value:59622}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652278 nanos:753376128} http:{id:\"ce4ebac8-fd34-4e85-9c91-b676fb166810\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"ce4ebac8-fd34-4e85-9c91-b676fb166810\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ce4ebac8-fd34-4e85-9c91-b676fb166810"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":753376128,"seconds":1783652278}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59622},"address":"10.132.0.12:59622"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ce4ebac8-fd34-4e85-9c91-b676fb166810"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":753376128,"seconds":1783652278},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:59622","port":59622}}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/auth-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce4ebac8-fd34-4e85-9c91-b676fb166810","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60708","PortSpecifier":{"PortValue":60708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","object":"source:{address:{socket_address:{address:\"10.132.0.12:60708\" port_value:60708}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652278 nanos:787606422} http:{id:\"87184158-c2fc-4b6b-b323-e7f0592e65b5\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"87184158-c2fc-4b6b-b323-e7f0592e65b5\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UD9irSV3Xi4482oZ_e4CAQfIVHLQnfmcTYuJkols6c5zJ1iSBTAAby7z5UDy"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f39689f-6ab2-4391-a662-44577aa97575","keyName":"e2e-auth-iso-a-e5ef2d","subscription":"e2e-auth-iso-73c173","tenant":"e2e-shared-a-1d77d1","userId":"6f39689f-6ab2-4391-a662-44577aa97575","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"87184158-c2fc-4b6b-b323-e7f0592e65b5"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":787606422,"seconds":1783652278}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60708},"address":"10.132.0.12:60708"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"87184158-c2fc-4b6b-b323-e7f0592e65b5"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":787606422,"seconds":1783652278},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:60708","port":60708}}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/auth-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-73c173"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87184158-c2fc-4b6b-b323-e7f0592e65b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:58:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1348230bb562df3b759dbcbee65bad80a04a9d1527b2ac8e0bf614856fd7339f"}
{"level":"info","ts":"2026-07-10T02:58:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a1b1a92e0d84c58581502ecf6c7ff8eecdf1a11680ccd0136410995d7324404"}
{"level":"info","ts":"2026-07-10T02:58:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02e0e5e24db77c4f6557c823ee6054b00e3f2e0ede97731dc7e5721c1deebe35"}
{"level":"info","ts":"2026-07-10T02:58:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0529df244ca74643e7f91560b5df95e1c4c5a064927d2c0113b8e710cb72496c"}
{"level":"info","ts":"2026-07-10T02:58:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb1da93a15e5c63f1ac496e4897add1b0ffb8be08383f5393351bb44a380b78b"}
{"level":"info","ts":"2026-07-10T02:58:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e41e371551b5c73184a243ff7642e8162a77bf0d977ac595411aa89455be8ab"}
{"level":"info","ts":"2026-07-10T02:58:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/090fa3dd8dee96a9f825c29b1f13c7ce4ed7e9aabcb7b0c1a9ceecbd28908b92"}
{"level":"info","ts":"2026-07-10T02:58:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cc34ed5c0f5c22e0bfcd04cd5fdedb349c6bf529d3c662bdb3024fe234029ad"}
{"level":"info","ts":"2026-07-10T02:58:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8b1465a1444e38f3b8faa6728ab70d1e1161af04a74556066977789d46aa2cd"}
{"level":"info","ts":"2026-07-10T02:58:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72e8abe02a079471f1759c624ea524aeec4a66e9b7f1d292301277a7fe33bbc2"}
{"level":"info","ts":"2026-07-10T02:58:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec20b8e647d498d5c7f230c942b4c66d451c0cc387f66add4a55b4ad777446e2"}
{"level":"info","ts":"2026-07-10T02:58:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9639826c9517b4455a4020b80cd4ef7da634aea7d3b5f650d127f8a449f33851"}
{"level":"info","ts":"2026-07-10T02:58:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62dad480efe7293e420797b3211ef267650a5ec12559fa7ee334aad32bd2c175"}
{"level":"info","ts":"2026-07-10T02:58:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e318826454b2e6611f9d83f1d8c27a1ef87b856630db6ddb5e75219415f1474"}
{"level":"info","ts":"2026-07-10T02:58:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6245003add050242c002456de43353d1247e6144f4dbcca96daf972be4d479c"}
{"level":"info","ts":"2026-07-10T02:58:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/773bb1f5b8af4a58c1534026117ae194be217c48a3899a0b20b8529b04c9d34e"}
{"level":"debug","ts":"2026-07-10T02:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6"}
{"level":"debug","ts":"2026-07-10T02:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6"}
{"level":"debug","ts":"2026-07-10T02:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6"}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c"}
{"level":"error","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c"}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556"}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388863e09a8539f204f248ede7561a30638f5904c11cfb6bc3781eaa9bda265d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388863e09a8539f204f248ede7561a30638f5904c11cfb6bc3781eaa9bda265d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388863e09a8539f204f248ede7561a30638f5904c11cfb6bc3781eaa9bda265d"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388863e09a8539f204f248ede7561a30638f5904c11cfb6bc3781eaa9bda265d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388863e09a8539f204f248ede7561a30638f5904c11cfb6bc3781eaa9bda265d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388863e09a8539f204f248ede7561a30638f5904c11cfb6bc3781eaa9bda265d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388863e09a8539f204f248ede7561a30638f5904c11cfb6bc3781eaa9bda265d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388863e09a8539f204f248ede7561a30638f5904c11cfb6bc3781eaa9bda265d"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f"}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e"}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e"}
{"level":"error","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31"}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31"}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f2640bf9c8c198f91941ddc3225d09493566cfec377ec4fca1b67412ae1324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f2640bf9c8c198f91941ddc3225d09493566cfec377ec4fca1b67412ae1324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f2640bf9c8c198f91941ddc3225d09493566cfec377ec4fca1b67412ae1324"}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f2640bf9c8c198f91941ddc3225d09493566cfec377ec4fca1b67412ae1324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f2640bf9c8c198f91941ddc3225d09493566cfec377ec4fca1b67412ae1324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f2640bf9c8c198f91941ddc3225d09493566cfec377ec4fca1b67412ae1324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31"}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f2640bf9c8c198f91941ddc3225d09493566cfec377ec4fca1b67412ae1324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f2640bf9c8c198f91941ddc3225d09493566cfec377ec4fca1b67412ae1324"}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31"}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf"}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf"}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db1d6352bb3df6c7b41c5be745c13f7c5530f0195b9d2388a6f356f555aea4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db1d6352bb3df6c7b41c5be745c13f7c5530f0195b9d2388a6f356f555aea4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db1d6352bb3df6c7b41c5be745c13f7c5530f0195b9d2388a6f356f555aea4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db1d6352bb3df6c7b41c5be745c13f7c5530f0195b9d2388a6f356f555aea4e"}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db1d6352bb3df6c7b41c5be745c13f7c5530f0195b9d2388a6f356f555aea4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7db1d6352bb3df6c7b41c5be745c13f7c5530f0195b9d2388a6f356f555aea4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db1d6352bb3df6c7b41c5be745c13f7c5530f0195b9d2388a6f356f555aea4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db1d6352bb3df6c7b41c5be745c13f7c5530f0195b9d2388a6f356f555aea4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf"}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db1d6352bb3df6c7b41c5be745c13f7c5530f0195b9d2388a6f356f555aea4e"}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0"}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0"}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875"}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0"}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875"}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875"}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875"}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:58:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875"}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e"}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e"}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e"}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf"}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf"}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf"}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31"}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f2640bf9c8c198f91941ddc3225d09493566cfec377ec4fca1b67412ae1324","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f2640bf9c8c198f91941ddc3225d09493566cfec377ec4fca1b67412ae1324"}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0"}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db1d6352bb3df6c7b41c5be745c13f7c5530f0195b9d2388a6f356f555aea4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630"}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db1d6352bb3df6c7b41c5be745c13f7c5530f0195b9d2388a6f356f555aea4e"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6"}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5"}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388863e09a8539f204f248ede7561a30638f5904c11cfb6bc3781eaa9bda265d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388863e09a8539f204f248ede7561a30638f5904c11cfb6bc3781eaa9bda265d"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5"}
{"level":"debug","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c"}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"}
{"level":"info","ts":"2026-07-10T02:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f"}
{"level":"info","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51456","PortSpecifier":{"PortValue":51456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","object":"source:{address:{socket_address:{address:\"10.132.0.12:51456\" port_value:51456}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652352 nanos:554443331} http:{id:\"bff41eab-ccb9-4b12-80c7-819f8252bfd2\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"bff41eab-ccb9-4b12-80c7-819f8252bfd2\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":554443331,"seconds":1783652352}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51456},"address":"10.132.0.12:51456"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":554443331,"seconds":1783652352},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:51456","port":51456}}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/sub-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bff41eab-ccb9-4b12-80c7-819f8252bfd2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38110","PortSpecifier":{"PortValue":38110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","object":"source:{address:{socket_address:{address:\"10.132.0.12:38110\" port_value:38110}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652352 nanos:600136126} http:{id:\"0dc78df8-64e4-4579-82de-6310bdbc7f85\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"0dc78df8-64e4-4579-82de-6310bdbc7f85\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdC01NGM3Yzc4ZjQ3LWRxa2txCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0dc78df8-64e4-4579-82de-6310bdbc7f85"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":600136126,"seconds":1783652352}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38110},"address":"10.132.0.12:38110"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0dc78df8-64e4-4579-82de-6310bdbc7f85"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":600136126,"seconds":1783652352},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:38110","port":38110}}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/sub-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dc78df8-64e4-4579-82de-6310bdbc7f85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51472","PortSpecifier":{"PortValue":51472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d27be7ed-d2a6-493e-9141-54751f18f442","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","object":"source:{address:{socket_address:{address:\"10.132.0.12:51472\" port_value:51472}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652352 nanos:646693728} http:{id:\"d27be7ed-d2a6-493e-9141-54751f18f442\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"d27be7ed-d2a6-493e-9141-54751f18f442\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bLblxzRVy1aJsQqg_gDfgCoWb2xzuyhV3LTiBxX0oB9kJDuEkHsjcxYMGvZr"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f18dd28a-a551-42bc-aadc-d5485f211a1d","keyName":"e2e-sub-iso-c06278","subscription":"e2e-a-only-408b9c","tenant":"e2e-shared-a-1d77d1","userId":"f18dd28a-a551-42bc-aadc-d5485f211a1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d27be7ed-d2a6-493e-9141-54751f18f442"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"d27be7ed-d2a6-493e-9141-54751f18f442","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":646693728,"seconds":1783652352}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51472},"address":"10.132.0.12:51472"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d27be7ed-d2a6-493e-9141-54751f18f442"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"d27be7ed-d2a6-493e-9141-54751f18f442","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":646693728,"seconds":1783652352},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:51472","port":51472}}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/sub-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-408b9c"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d27be7ed-d2a6-493e-9141-54751f18f442","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38124","PortSpecifier":{"PortValue":38124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2610a02-735b-4a7c-beb8-1311910324b0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","object":"source:{address:{socket_address:{address:\"10.132.0.12:38124\" port_value:38124}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652352 nanos:692072158} http:{id:\"a2610a02-735b-4a7c-beb8-1311910324b0\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"a2610a02-735b-4a7c-beb8-1311910324b0\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BgRTWJB8NwxVyfbb_BwucyacfFq33gihWr9ieKJ9SnyKZ8KhHVKrU15dLO15"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"503fd4cd-65ba-4aa1-8aa8-0904cfc814f1","keyName":"e2e-sub-iso-9102ff","subscription":"e2e-b-only-408b9c","tenant":"e2e-shared-b-f94570","userId":"503fd4cd-65ba-4aa1-8aa8-0904cfc814f1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a2610a02-735b-4a7c-beb8-1311910324b0"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"a2610a02-735b-4a7c-beb8-1311910324b0","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":692072158,"seconds":1783652352}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38124},"address":"10.132.0.12:38124"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a2610a02-735b-4a7c-beb8-1311910324b0"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"a2610a02-735b-4a7c-beb8-1311910324b0","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":692072158,"seconds":1783652352},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:38124","port":38124}}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/sub-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-408b9c"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:59:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2610a02-735b-4a7c-beb8-1311910324b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38948","PortSpecifier":{"PortValue":38948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","object":"source:{address:{socket_address:{address:\"10.132.0.12:38948\" port_value:38948}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652365 nanos:631989349} http:{id:\"18accd6f-cf0b-4740-a4a3-1cb027eff43c\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"18accd6f-cf0b-4740-a4a3-1cb027eff43c\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":631989349,"seconds":1783652365}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38948},"address":"10.132.0.12:38948"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":631989349,"seconds":1783652365},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:38948","port":38948}}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/sub-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18accd6f-cf0b-4740-a4a3-1cb027eff43c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33840","PortSpecifier":{"PortValue":33840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","object":"source:{address:{socket_address:{address:\"10.132.0.12:33840\" port_value:33840}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652365 nanos:672087711} http:{id:\"b924d450-bf7b-4f3b-8cfe-b153e7265646\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdC01NGM3Yzc4ZjQ3LWRxa2txCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"b924d450-bf7b-4f3b-8cfe-b153e7265646\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b924d450-bf7b-4f3b-8cfe-b153e7265646"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":672087711,"seconds":1783652365}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33840},"address":"10.132.0.12:33840"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdC01NGM3Yzc4ZjQ3LWRxa2txCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b924d450-bf7b-4f3b-8cfe-b153e7265646"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":672087711,"seconds":1783652365},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:33840","port":33840}}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/sub-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b924d450-bf7b-4f3b-8cfe-b153e7265646","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38956","PortSpecifier":{"PortValue":38956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","object":"source:{address:{socket_address:{address:\"10.132.0.12:38956\" port_value:38956}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652365 nanos:710028765} http:{id:\"c76e67ca-0a50-46d7-93f5-e540c2d7ac64\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"c76e67ca-0a50-46d7-93f5-e540c2d7ac64\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Q6a6VwsaTmR3QYJW_pd7KhabHW11T1sZeiaINzOwe0vwVdjZjuVeM4pBrR49"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8de0bd38-80e8-4229-bc54-3dcfc5147bfc","keyName":"e2e-sub-iso-e77302","subscription":"e2e-shared-sub-d4c23b","tenant":"e2e-shared-a-1d77d1","userId":"8de0bd38-80e8-4229-bc54-3dcfc5147bfc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":710028765,"seconds":1783652365}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38956},"address":"10.132.0.12:38956"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":710028765,"seconds":1783652365},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:38956","port":38956}}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/sub-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d4c23b"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c76e67ca-0a50-46d7-93f5-e540c2d7ac64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33854","PortSpecifier":{"PortValue":33854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69534aa0-4e01-4671-99f5-eae55a532dd0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","object":"source:{address:{socket_address:{address:\"10.132.0.12:33854\" port_value:33854}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652365 nanos:740881647} http:{id:\"69534aa0-4e01-4671-99f5-eae55a532dd0\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"69534aa0-4e01-4671-99f5-eae55a532dd0\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BDIH6UlVU3jTGEBX_au5qFcLapeMeaC8Jpi85ZNqeVk0xY0HtsDNxLcOszYf"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e6a874b7-49f7-4822-85e4-505c1e072854","keyName":"e2e-sub-iso-a9c94b","subscription":"e2e-shared-sub-d4c23b","tenant":"e2e-shared-b-f94570","userId":"e6a874b7-49f7-4822-85e4-505c1e072854","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"69534aa0-4e01-4671-99f5-eae55a532dd0"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"69534aa0-4e01-4671-99f5-eae55a532dd0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":740881647,"seconds":1783652365}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33854},"address":"10.132.0.12:33854"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"69534aa0-4e01-4671-99f5-eae55a532dd0"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"69534aa0-4e01-4671-99f5-eae55a532dd0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":740881647,"seconds":1783652365},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:33854","port":33854}}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/sub-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d4c23b"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T02:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69534aa0-4e01-4671-99f5-eae55a532dd0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f14266219ece58b3e71eaab5e8e65532c0f86b3653d3f54055af2a40c75bb6f"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/595aba9e89e47c6ebed3cdeb146b51951af69e49be027d3b3633642692ec60bf"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53dfbd9daed1728f3444bcd14c21d45b68e3558057de990971744f0e4eb0d875"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70dec4125f646d16f41ae8a4e35b748b989a1d2b8c706481921614b5f9c54cf6"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/388863e09a8539f204f248ede7561a30638f5904c11cfb6bc3781eaa9bda265d"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c013d75a7a5786573c73d5df45767b61ef8aa8bac65ec98925c3c82e9109d31"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83f2640bf9c8c198f91941ddc3225d09493566cfec377ec4fca1b67412ae1324"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7db1d6352bb3df6c7b41c5be745c13f7c5530f0195b9d2388a6f356f555aea4e"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1722805fdfa4e6f8fd9fa653309f1dd4a25a052f8f0882c9d0defe1e9039860"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a6df6cc7ea7520bb2d391cb5796b678cee84944d512602e77a3f2d6e6ff5556"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28f00ac7e3a94685f2f3cf2af0a81607a20e34bce6b88a2dbabae9a770b3774c"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac5e7a6fea5b9bebc3f972e451fbdab44be7051b0655b21879b9fe398af5a4ab"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe7d98beb458cda4cf8e1a18fb5fd1b2fbf218e7ef1eedae920340af50c7f083"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbfef563be246c0baeebd3aca647400e222f808e7e49ecf2105cc9c35326d8b1"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f464905bef222c6e518517df09692807c509e86268649411f7e7b6f6d61504e"}
{"level":"info","ts":"2026-07-10T02:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b93bebfe3aee35b84f3bbe8c4f41ed4ca805965be63eac8deecf1f4e2f145e0"}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf4da9e0acb78d21032295f864c439e217dc0c2575534a3c06e87341e4208dee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf4da9e0acb78d21032295f864c439e217dc0c2575534a3c06e87341e4208dee"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf4da9e0acb78d21032295f864c439e217dc0c2575534a3c06e87341e4208dee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf4da9e0acb78d21032295f864c439e217dc0c2575534a3c06e87341e4208dee"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf4da9e0acb78d21032295f864c439e217dc0c2575534a3c06e87341e4208dee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf4da9e0acb78d21032295f864c439e217dc0c2575534a3c06e87341e4208dee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf4da9e0acb78d21032295f864c439e217dc0c2575534a3c06e87341e4208dee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf4da9e0acb78d21032295f864c439e217dc0c2575534a3c06e87341e4208dee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf4da9e0acb78d21032295f864c439e217dc0c2575534a3c06e87341e4208dee"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"}
{"level":"info","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b819901fa2b5e26320e3e1b387e79eeb2f70de5167a4e09c428b11aeff2f78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b819901fa2b5e26320e3e1b387e79eeb2f70de5167a4e09c428b11aeff2f78"}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b819901fa2b5e26320e3e1b387e79eeb2f70de5167a4e09c428b11aeff2f78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b819901fa2b5e26320e3e1b387e79eeb2f70de5167a4e09c428b11aeff2f78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b819901fa2b5e26320e3e1b387e79eeb2f70de5167a4e09c428b11aeff2f78"}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b819901fa2b5e26320e3e1b387e79eeb2f70de5167a4e09c428b11aeff2f78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b819901fa2b5e26320e3e1b387e79eeb2f70de5167a4e09c428b11aeff2f78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b819901fa2b5e26320e3e1b387e79eeb2f70de5167a4e09c428b11aeff2f78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b819901fa2b5e26320e3e1b387e79eeb2f70de5167a4e09c428b11aeff2f78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"}
{"level":"error","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b819901fa2b5e26320e3e1b387e79eeb2f70de5167a4e09c428b11aeff2f78"}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b"}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412"}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b"}
{"level":"error","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:59:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412"}
{"level":"info","ts":"2026-07-10T02:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b"}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb"}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb"}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb"}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e"}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e"}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cf7ce7a253fa8f555674761523454f8fee00d2bed2caeaf5e91599eff50f72b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cf7ce7a253fa8f555674761523454f8fee00d2bed2caeaf5e91599eff50f72b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cf7ce7a253fa8f555674761523454f8fee00d2bed2caeaf5e91599eff50f72b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cf7ce7a253fa8f555674761523454f8fee00d2bed2caeaf5e91599eff50f72b"}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cf7ce7a253fa8f555674761523454f8fee00d2bed2caeaf5e91599eff50f72b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cf7ce7a253fa8f555674761523454f8fee00d2bed2caeaf5e91599eff50f72b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cf7ce7a253fa8f555674761523454f8fee00d2bed2caeaf5e91599eff50f72b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cf7ce7a253fa8f555674761523454f8fee00d2bed2caeaf5e91599eff50f72b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e"}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cf7ce7a253fa8f555674761523454f8fee00d2bed2caeaf5e91599eff50f72b"}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850"}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850"}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"836f3a710900229cdbcaa70b3131bae035446c919dd1d2177ffdd38d099c304f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850"}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"836f3a710900229cdbcaa70b3131bae035446c919dd1d2177ffdd38d099c304f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"836f3a710900229cdbcaa70b3131bae035446c919dd1d2177ffdd38d099c304f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836f3a710900229cdbcaa70b3131bae035446c919dd1d2177ffdd38d099c304f"}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"836f3a710900229cdbcaa70b3131bae035446c919dd1d2177ffdd38d099c304f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"836f3a710900229cdbcaa70b3131bae035446c919dd1d2177ffdd38d099c304f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["836f3a710900229cdbcaa70b3131bae035446c919dd1d2177ffdd38d099c304f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"836f3a710900229cdbcaa70b3131bae035446c919dd1d2177ffdd38d099c304f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"836f3a710900229cdbcaa70b3131bae035446c919dd1d2177ffdd38d099c304f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850"}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836f3a710900229cdbcaa70b3131bae035446c919dd1d2177ffdd38d099c304f"}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850"}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f"}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331"}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f"}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331"}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f"}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331"}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f"}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331"}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f"}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c"}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f"}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c"}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c"}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b"}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b"}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b"}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:00:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"836f3a710900229cdbcaa70b3131bae035446c919dd1d2177ffdd38d099c304f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836f3a710900229cdbcaa70b3131bae035446c919dd1d2177ffdd38d099c304f"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cf7ce7a253fa8f555674761523454f8fee00d2bed2caeaf5e91599eff50f72b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b819901fa2b5e26320e3e1b387e79eeb2f70de5167a4e09c428b11aeff2f78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cf7ce7a253fa8f555674761523454f8fee00d2bed2caeaf5e91599eff50f72b"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"}
{"level":"debug","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf4da9e0acb78d21032295f864c439e217dc0c2575534a3c06e87341e4208dee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b819901fa2b5e26320e3e1b387e79eeb2f70de5167a4e09c428b11aeff2f78"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331"}
{"level":"info","ts":"2026-07-10T03:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf4da9e0acb78d21032295f864c439e217dc0c2575534a3c06e87341e4208dee"}
{"level":"info","ts":"2026-07-10T03:00:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2004734b-99ad-4b34-b190-84fff4fa3f94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35748","PortSpecifier":{"PortValue":35748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2004734b-99ad-4b34-b190-84fff4fa3f94","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:00:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2004734b-99ad-4b34-b190-84fff4fa3f94","object":"source:{address:{socket_address:{address:\"10.132.0.12:35748\" port_value:35748}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652433 nanos:996885471} http:{id:\"2004734b-99ad-4b34-b190-84fff4fa3f94\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"2004734b-99ad-4b34-b190-84fff4fa3f94\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2004734b-99ad-4b34-b190-84fff4fa3f94","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2004734b-99ad-4b34-b190-84fff4fa3f94","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2004734b-99ad-4b34-b190-84fff4fa3f94","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2004734b-99ad-4b34-b190-84fff4fa3f94"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"2004734b-99ad-4b34-b190-84fff4fa3f94","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":996885471,"seconds":1783652433}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35748},"address":"10.132.0.12:35748"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2004734b-99ad-4b34-b190-84fff4fa3f94"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"2004734b-99ad-4b34-b190-84fff4fa3f94","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":996885471,"seconds":1783652433},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:35748","port":35748}}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2004734b-99ad-4b34-b190-84fff4fa3f94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2004734b-99ad-4b34-b190-84fff4fa3f94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2004734b-99ad-4b34-b190-84fff4fa3f94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2004734b-99ad-4b34-b190-84fff4fa3f94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2004734b-99ad-4b34-b190-84fff4fa3f94","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2004734b-99ad-4b34-b190-84fff4fa3f94","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2004734b-99ad-4b34-b190-84fff4fa3f94","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2004734b-99ad-4b34-b190-84fff4fa3f94","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fa777d4-e2a9-4129-a637-3b0414dede23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45808","PortSpecifier":{"PortValue":45808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fa777d4-e2a9-4129-a637-3b0414dede23","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fa777d4-e2a9-4129-a637-3b0414dede23","object":"source:{address:{socket_address:{address:\"10.132.0.12:45808\" port_value:45808}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652434 nanos:37837330} http:{id:\"0fa777d4-e2a9-4129-a637-3b0414dede23\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"0fa777d4-e2a9-4129-a637-3b0414dede23\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0fa777d4-e2a9-4129-a637-3b0414dede23","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fa777d4-e2a9-4129-a637-3b0414dede23","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fa777d4-e2a9-4129-a637-3b0414dede23","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0fa777d4-e2a9-4129-a637-3b0414dede23"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"0fa777d4-e2a9-4129-a637-3b0414dede23","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":37837330,"seconds":1783652434}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":45808},"address":"10.132.0.12:45808"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0fa777d4-e2a9-4129-a637-3b0414dede23"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"0fa777d4-e2a9-4129-a637-3b0414dede23","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":37837330,"seconds":1783652434},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:45808","port":45808}}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fa777d4-e2a9-4129-a637-3b0414dede23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fa777d4-e2a9-4129-a637-3b0414dede23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fa777d4-e2a9-4129-a637-3b0414dede23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/rate-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0fa777d4-e2a9-4129-a637-3b0414dede23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fa777d4-e2a9-4129-a637-3b0414dede23","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fa777d4-e2a9-4129-a637-3b0414dede23","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fa777d4-e2a9-4129-a637-3b0414dede23","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fa777d4-e2a9-4129-a637-3b0414dede23","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35756","PortSpecifier":{"PortValue":35756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","object":"source:{address:{socket_address:{address:\"10.132.0.12:35756\" port_value:35756}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652434 nanos:78507154} http:{id:\"5b77955c-ad9b-49f5-97b9-bf9912cbf887\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"5b77955c-ad9b-49f5-97b9-bf9912cbf887\"} path:\"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1DNZqDylWG5pc7zSh_cGnaso2BJZvZsgDj3lStjzCyltkRxV0ojrhQTcx7yNf"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ae7caf8e-680c-44dd-ba66-95440b4eaea7","keyName":"e2e-rate-a-f52a82","subscription":"e2e-rate-iso-a-f52a82","tenant":"e2e-shared-a-1d77d1","userId":"ae7caf8e-680c-44dd-ba66-95440b4eaea7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1d77d1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f52a82","namespace":"ai-tenant-e2e-shared-a-1d77d1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":78507154,"seconds":1783652434}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35756},"address":"10.132.0.12:35756"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":78507154,"seconds":1783652434},"url_path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:35756","port":35756}}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f52a82"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ae7caf8e-680c-44dd-ba66-95440b4eaea7","keyName":"e2e-rate-a-f52a82","selected_subscription":"e2e-rate-iso-a-f52a82","selected_subscription_key":"ai-tenant-e2e-shared-a-1d77d1/e2e-rate-iso-a-f52a82@ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1d77d1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f52a82","namespace":"ai-tenant-e2e-shared-a-1d77d1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:00:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b77955c-ad9b-49f5-97b9-bf9912cbf887","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35764","PortSpecifier":{"PortValue":35764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","object":"source:{address:{socket_address:{address:\"10.132.0.12:35764\" port_value:35764}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652435 nanos:138468739} http:{id:\"352c2ebd-9fbd-44b3-a39e-2a94a161a801\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"352c2ebd-9fbd-44b3-a39e-2a94a161a801\"} path:\"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1DNZqDylWG5pc7zSh_cGnaso2BJZvZsgDj3lStjzCyltkRxV0ojrhQTcx7yNf"}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ae7caf8e-680c-44dd-ba66-95440b4eaea7","keyName":"e2e-rate-a-f52a82","subscription":"e2e-rate-iso-a-f52a82","tenant":"e2e-shared-a-1d77d1","userId":"ae7caf8e-680c-44dd-ba66-95440b4eaea7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1d77d1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f52a82","namespace":"ai-tenant-e2e-shared-a-1d77d1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":138468739,"seconds":1783652435}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35764},"address":"10.132.0.12:35764"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":138468739,"seconds":1783652435},"url_path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:35764","port":35764}}}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f52a82"}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ae7caf8e-680c-44dd-ba66-95440b4eaea7","keyName":"e2e-rate-a-f52a82","selected_subscription":"e2e-rate-iso-a-f52a82","selected_subscription_key":"ai-tenant-e2e-shared-a-1d77d1/e2e-rate-iso-a-f52a82@ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1d77d1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f52a82","namespace":"ai-tenant-e2e-shared-a-1d77d1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:00:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"352c2ebd-9fbd-44b3-a39e-2a94a161a801","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35778","PortSpecifier":{"PortValue":35778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","object":"source:{address:{socket_address:{address:\"10.132.0.12:35778\" port_value:35778}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652436 nanos:176434708} http:{id:\"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1\"} path:\"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1DNZqDylWG5pc7zSh_cGnaso2BJZvZsgDj3lStjzCyltkRxV0ojrhQTcx7yNf"}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ae7caf8e-680c-44dd-ba66-95440b4eaea7","keyName":"e2e-rate-a-f52a82","subscription":"e2e-rate-iso-a-f52a82","tenant":"e2e-shared-a-1d77d1","userId":"ae7caf8e-680c-44dd-ba66-95440b4eaea7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1d77d1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f52a82","namespace":"ai-tenant-e2e-shared-a-1d77d1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":176434708,"seconds":1783652436}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35778},"address":"10.132.0.12:35778"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":176434708,"seconds":1783652436},"url_path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:35778","port":35778}}}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f52a82"}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ae7caf8e-680c-44dd-ba66-95440b4eaea7","keyName":"e2e-rate-a-f52a82","selected_subscription":"e2e-rate-iso-a-f52a82","selected_subscription_key":"ai-tenant-e2e-shared-a-1d77d1/e2e-rate-iso-a-f52a82@ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1d77d1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f52a82","namespace":"ai-tenant-e2e-shared-a-1d77d1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:00:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57fa9bfc-0c0b-4dc9-bf09-5590b2c170a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"438fffb7-3066-4ddb-9379-381ba7c97b64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53488","PortSpecifier":{"PortValue":53488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"438fffb7-3066-4ddb-9379-381ba7c97b64","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"438fffb7-3066-4ddb-9379-381ba7c97b64","object":"source:{address:{socket_address:{address:\"10.132.0.12:53488\" port_value:53488}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652442 nanos:613903030} http:{id:\"438fffb7-3066-4ddb-9379-381ba7c97b64\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"438fffb7-3066-4ddb-9379-381ba7c97b64\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"438fffb7-3066-4ddb-9379-381ba7c97b64","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"438fffb7-3066-4ddb-9379-381ba7c97b64","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"438fffb7-3066-4ddb-9379-381ba7c97b64","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"438fffb7-3066-4ddb-9379-381ba7c97b64"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"438fffb7-3066-4ddb-9379-381ba7c97b64","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":613903030,"seconds":1783652442}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53488},"address":"10.132.0.12:53488"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"438fffb7-3066-4ddb-9379-381ba7c97b64"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"438fffb7-3066-4ddb-9379-381ba7c97b64","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":613903030,"seconds":1783652442},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:53488","port":53488}}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"438fffb7-3066-4ddb-9379-381ba7c97b64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"438fffb7-3066-4ddb-9379-381ba7c97b64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"438fffb7-3066-4ddb-9379-381ba7c97b64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"438fffb7-3066-4ddb-9379-381ba7c97b64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"438fffb7-3066-4ddb-9379-381ba7c97b64","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"438fffb7-3066-4ddb-9379-381ba7c97b64","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"438fffb7-3066-4ddb-9379-381ba7c97b64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"438fffb7-3066-4ddb-9379-381ba7c97b64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42972","PortSpecifier":{"PortValue":42972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","object":"source:{address:{socket_address:{address:\"10.132.0.12:42972\" port_value:42972}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652442 nanos:650501122} http:{id:\"31b50c59-7ad9-4f3d-b127-64dbcef08f91\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdC01NGM3Yzc4ZjQ3LWRxa2txCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"31b50c59-7ad9-4f3d-b127-64dbcef08f91\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b5e0f1e3c29b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ff4b0234-cbcd-45e1-92cf-ac83ec9ca414"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8fe0bfd-695e-4874-b385-cd092e28ae74","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdC01NGM3Yzc4ZjQ3LWRxa2txCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY5NDU3MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mOTQ1NzAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":650501122,"seconds":1783652442}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":42972},"address":"10.132.0.12:42972"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":650501122,"seconds":1783652442},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:42972","port":42972}}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/rate-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31b50c59-7ad9-4f3d-b127-64dbcef08f91","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53496","PortSpecifier":{"PortValue":53496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32cbb140-2b1f-4743-a468-76edc5555d3c","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","object":"source:{address:{socket_address:{address:\"10.132.0.12:53496\" port_value:53496}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652442 nanos:686116071} http:{id:\"32cbb140-2b1f-4743-a468-76edc5555d3c\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"32cbb140-2b1f-4743-a468-76edc5555d3c\"} path:\"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SYx3LJY278kwrC0c_1qplNOBaGF6x1d6TwdvmdnF05O20BCW24kyyl6JEzds"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d24b3065-9571-4bd4-90ff-62c5f9fcc254","keyName":"e2e-rate-a-44bf16","subscription":"e2e-rate-iso-a-44bf16","tenant":"e2e-shared-a-1d77d1","userId":"d24b3065-9571-4bd4-90ff-62c5f9fcc254","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1d77d1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-44bf16","namespace":"ai-tenant-e2e-shared-a-1d77d1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"32cbb140-2b1f-4743-a468-76edc5555d3c"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"32cbb140-2b1f-4743-a468-76edc5555d3c","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":686116071,"seconds":1783652442}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53496},"address":"10.132.0.12:53496"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"32cbb140-2b1f-4743-a468-76edc5555d3c"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"32cbb140-2b1f-4743-a468-76edc5555d3c","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":686116071,"seconds":1783652442},"url_path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:53496","port":53496}}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-44bf16"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d24b3065-9571-4bd4-90ff-62c5f9fcc254","keyName":"e2e-rate-a-44bf16","selected_subscription":"e2e-rate-iso-a-44bf16","selected_subscription_key":"ai-tenant-e2e-shared-a-1d77d1/e2e-rate-iso-a-44bf16@ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1d77d1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-44bf16","namespace":"ai-tenant-e2e-shared-a-1d77d1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:00:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32cbb140-2b1f-4743-a468-76edc5555d3c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbc67765-09e4-4277-8f92-e588475951b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53512","PortSpecifier":{"PortValue":53512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbc67765-09e4-4277-8f92-e588475951b5","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbc67765-09e4-4277-8f92-e588475951b5","object":"source:{address:{socket_address:{address:\"10.132.0.12:53512\" port_value:53512}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652443 nanos:720359102} http:{id:\"cbc67765-09e4-4277-8f92-e588475951b5\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"cbc67765-09e4-4277-8f92-e588475951b5\"} path:\"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbc67765-09e4-4277-8f92-e588475951b5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SYx3LJY278kwrC0c_1qplNOBaGF6x1d6TwdvmdnF05O20BCW24kyyl6JEzds"}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbc67765-09e4-4277-8f92-e588475951b5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbc67765-09e4-4277-8f92-e588475951b5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d24b3065-9571-4bd4-90ff-62c5f9fcc254","keyName":"e2e-rate-a-44bf16","subscription":"e2e-rate-iso-a-44bf16","tenant":"e2e-shared-a-1d77d1","userId":"d24b3065-9571-4bd4-90ff-62c5f9fcc254","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbc67765-09e4-4277-8f92-e588475951b5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbc67765-09e4-4277-8f92-e588475951b5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1d77d1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-44bf16","namespace":"ai-tenant-e2e-shared-a-1d77d1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbc67765-09e4-4277-8f92-e588475951b5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cbc67765-09e4-4277-8f92-e588475951b5"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"cbc67765-09e4-4277-8f92-e588475951b5","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":720359102,"seconds":1783652443}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53512},"address":"10.132.0.12:53512"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdC03ZmI1NzU3Nzc1LWNzeDdkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFkNzdkMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZDc3ZDEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cbc67765-09e4-4277-8f92-e588475951b5"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"cbc67765-09e4-4277-8f92-e588475951b5","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":720359102,"seconds":1783652443},"url_path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:53512","port":53512}}}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbc67765-09e4-4277-8f92-e588475951b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbc67765-09e4-4277-8f92-e588475951b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbc67765-09e4-4277-8f92-e588475951b5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbc67765-09e4-4277-8f92-e588475951b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbc67765-09e4-4277-8f92-e588475951b5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbc67765-09e4-4277-8f92-e588475951b5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-44bf16"}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbc67765-09e4-4277-8f92-e588475951b5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbc67765-09e4-4277-8f92-e588475951b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d24b3065-9571-4bd4-90ff-62c5f9fcc254","keyName":"e2e-rate-a-44bf16","selected_subscription":"e2e-rate-iso-a-44bf16","selected_subscription_key":"ai-tenant-e2e-shared-a-1d77d1/e2e-rate-iso-a-44bf16@ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1d77d1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-44bf16","namespace":"ai-tenant-e2e-shared-a-1d77d1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbc67765-09e4-4277-8f92-e588475951b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:00:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbc67765-09e4-4277-8f92-e588475951b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53528","PortSpecifier":{"PortValue":53528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","object":"source:{address:{socket_address:{address:\"10.132.0.12:53528\" port_value:53528}}} destination:{address:{socket_address:{address:\"10.134.0.40:443\" port_value:443}}} request:{time:{seconds:1783652444 nanos:753513932} http:{id:\"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13\"} path:\"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions\" host:\"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SYx3LJY278kwrC0c_1qplNOBaGF6x1d6TwdvmdnF05O20BCW24kyyl6JEzds"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d24b3065-9571-4bd4-90ff-62c5f9fcc254","keyName":"e2e-rate-a-44bf16","subscription":"e2e-rate-iso-a-44bf16","tenant":"e2e-shared-a-1d77d1","userId":"d24b3065-9571-4bd4-90ff-62c5f9fcc254","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1d77d1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1d77d1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-44bf16","namespace":"ai-tenant-e2e-shared-a-1d77d1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":753513932,"seconds":1783652444}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53528},"address":"10.132.0.12:53528"}}}}},"destination":{"address":"10.134.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"},"headers":{":authority":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1d77d1-kserve-workload-svc.ai-tenant-e2e-shared-a-1d77d1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.40~e2e-shared-a-1d77d1-openshift-default-7fb5757775-csx7d.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13"},"host":"e2e-shared-a-1d77d1.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","method":"POST","path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":753513932,"seconds":1783652444},"url_path":"/ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:53528","port":53528}}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-44bf16"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d24b3065-9571-4bd4-90ff-62c5f9fcc254","keyName":"e2e-rate-a-44bf16","selected_subscription":"e2e-rate-iso-a-44bf16","selected_subscription_key":"ai-tenant-e2e-shared-a-1d77d1/e2e-rate-iso-a-44bf16@ai-tenant-e2e-shared-a-1d77d1/rate-test-model-1d77d1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1d77d1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-44bf16","namespace":"ai-tenant-e2e-shared-a-1d77d1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cfa8ebd-89d8-4585-b97b-cd0a6f4c6c13","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42984","PortSpecifier":{"PortValue":42984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","method":"POST","path":"/ai-tenant-e2e-shared-b-f94570/rate-test-model-f94570/v1/completions","host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","object":"source:{address:{socket_address:{address:\"10.132.0.12:42984\" port_value:42984}}} destination:{address:{socket_address:{address:\"10.134.0.41:443\" port_value:443}}} request:{time:{seconds:1783652444 nanos:789962942} http:{id:\"710be29c-242d-46d4-aa34-05a8e0b19bb2\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-f94570/rate-test-model-f94570/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-f94570-kserve-workload-svc.ai-tenant-e2e-shared-b-f94570.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"710be29c-242d-46d4-aa34-05a8e0b19bb2\"} path:\"/ai-tenant-e2e-shared-b-f94570/rate-test-model-f94570/v1/completions\" host:\"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-I1vyj2zdjexLwAl4_1GrE02QhFQ4QJWX71FRZCIM143VR57ZnAep3deNGMuV"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e70b52d2-bba6-422d-a9d4-71d5e577b76e","keyName":"e2e-rate-b-44bf16","subscription":"e2e-rate-iso-b-44bf16","tenant":"e2e-shared-b-f94570","userId":"e70b52d2-bba6-422d-a9d4-71d5e577b76e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f94570.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f94570","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-44bf16","namespace":"ai-tenant-e2e-shared-b-f94570","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f94570-kserve-workload-svc.ai-tenant-e2e-shared-b-f94570.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"710be29c-242d-46d4-aa34-05a8e0b19bb2"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","method":"POST","path":"/ai-tenant-e2e-shared-b-f94570/rate-test-model-f94570/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":789962942,"seconds":1783652444}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":42984},"address":"10.132.0.12:42984"}}}}},"destination":{"address":"10.134.0.41:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e"},"headers":{":authority":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f94570/rate-test-model-f94570/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f94570-kserve-workload-svc.ai-tenant-e2e-shared-b-f94570.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.41~e2e-shared-b-f94570-openshift-default-54c7c78f47-dqkkq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.12","x-forwarded-host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"710be29c-242d-46d4-aa34-05a8e0b19bb2"},"host":"e2e-shared-b-f94570.apps.89c409c3-0d83-4961-9b25-b5e0f1e3c29b.prod.konfluxeaas.com","id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","method":"POST","path":"/ai-tenant-e2e-shared-b-f94570/rate-test-model-f94570/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":789962942,"seconds":1783652444},"url_path":"/ai-tenant-e2e-shared-b-f94570/rate-test-model-f94570/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:42984","port":42984}}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f94570/rate-test-model-f94570\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-44bf16"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e70b52d2-bba6-422d-a9d4-71d5e577b76e","keyName":"e2e-rate-b-44bf16","selected_subscription":"e2e-rate-iso-b-44bf16","selected_subscription_key":"ai-tenant-e2e-shared-b-f94570/e2e-rate-iso-b-44bf16@ai-tenant-e2e-shared-b-f94570/rate-test-model-f94570","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f94570","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-44bf16","namespace":"ai-tenant-e2e-shared-b-f94570","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:00:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"710be29c-242d-46d4-aa34-05a8e0b19bb2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/deafc9f6ba60d986fc606ac23ce8b4d7462b4c42171f0dee98412374745784b5"}
{"level":"info","ts":"2026-07-10T03:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30b23ff55bf7a1b58da101dbabba726b5b8a0aaf52ff2019a8aeae90068c4412"}
{"level":"info","ts":"2026-07-10T03:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf4da9e0acb78d21032295f864c439e217dc0c2575534a3c06e87341e4208dee"}
{"level":"info","ts":"2026-07-10T03:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6907ba8a3a6f26c0e828133f0c780f67e3aa1a11c12211704714eb6609bff77b"}
{"level":"info","ts":"2026-07-10T03:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29cbafa765e5712eac5d46e9d8ba54fc074e91670664ccc64bbbcc7650cd7c70"}
{"level":"info","ts":"2026-07-10T03:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26b819901fa2b5e26320e3e1b387e79eeb2f70de5167a4e09c428b11aeff2f78"}
{"level":"info","ts":"2026-07-10T03:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8fcdc0b1e69a2de38e7d434e9de90631ce05652a310d09db9b88559bed71bf5"}
{"level":"info","ts":"2026-07-10T03:00:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6da124375d599158681032bc1c13c16f0189e1452072e555656d95e6477ccf4d"}
{"level":"info","ts":"2026-07-10T03:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36ba669a1f20190b564337d95f507e2c37b7c609e5c11f299c520eb36878db7f"}
{"level":"info","ts":"2026-07-10T03:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdf4f7464b3ab3c13f96fa346abc826abc05f375b55224b3e2071be0c6ca36cb"}
{"level":"info","ts":"2026-07-10T03:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae9cf17db168c1485ff09e4ecabf48adbd36a395413e97c6d2dc75807ae72850"}
{"level":"info","ts":"2026-07-10T03:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8118102eda1c1608e590f496418161a322d5d9d91376cb12d2770f5208cec3c"}
{"level":"info","ts":"2026-07-10T03:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/836f3a710900229cdbcaa70b3131bae035446c919dd1d2177ffdd38d099c304f"}
{"level":"info","ts":"2026-07-10T03:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cf7ce7a253fa8f555674761523454f8fee00d2bed2caeaf5e91599eff50f72b"}
{"level":"info","ts":"2026-07-10T03:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52175d44fc7d2da79ee88fc43b0b4bb466e3b5b2c3dfc3b1c7f71d29ebd9290e"}
{"level":"info","ts":"2026-07-10T03:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58a4c9b13217dbdedb873d6be494a5186e1eb162ebde0613306e59fd8bddc331"}
{"level":"info","ts":"2026-07-10T03:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4717c91f97dc8387d009ef12ffb5520749372739d9347bc7a13d1456bb6cfd5d"}
{"level":"info","ts":"2026-07-10T03:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f54451a626e718a345eedf8eb19f26afef30fa66144bfa7933dc0c80bf710d5"}
{"level":"info","ts":"2026-07-10T03:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/333b734bb638a699ba250d367fa0bc9cacc9a7b980f94d6ae229e19959be70c9"}
{"level":"info","ts":"2026-07-10T03:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c52157e0adc33604abcf795a8f3b91f0aafa26e692c622c33307516a9c9f34a"}
{"level":"info","ts":"2026-07-10T03:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67b45f36cb3a84d76edd2b583079fa206eb07a054b93207bb943a848c28f38f7"}
{"level":"info","ts":"2026-07-10T03:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d1b73d3b01550f0b6d4cb74ac4f26515596e1541dd84aa1013168a5e5d0046d"}
{"level":"info","ts":"2026-07-10T03:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbc47766f4e6a3e2a035e5da3ee249bc480a8406b8e322a10da5b7be45fb7bef"}
{"level":"info","ts":"2026-07-10T03:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bdcbed256c6f4b9a0f232481b173a70fd8293da3cf9d26f82b2f69a1a738630"}