{"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/076e76026e825b6de31667a7cb129184bcd72f85c2fa8b3a12b93197443ebfb4"} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30"} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30"} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30"} {"level":"error","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30"} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128"} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128"} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30"} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128"} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4c1c9452fae77d072c14416906526806b39bc9b9d76853024a285fb1727b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4c1c9452fae77d072c14416906526806b39bc9b9d76853024a285fb1727b04"} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4c1c9452fae77d072c14416906526806b39bc9b9d76853024a285fb1727b04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30"} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4c1c9452fae77d072c14416906526806b39bc9b9d76853024a285fb1727b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed4c1c9452fae77d072c14416906526806b39bc9b9d76853024a285fb1727b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128"} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4c1c9452fae77d072c14416906526806b39bc9b9d76853024a285fb1727b04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4c1c9452fae77d072c14416906526806b39bc9b9d76853024a285fb1727b04"} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128"} {"level":"info","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed4c1c9452fae77d072c14416906526806b39bc9b9d76853024a285fb1727b04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54eecb4170b6ce373f4c75b8a591979322fbdc637218a97ca468831910682de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54eecb4170b6ce373f4c75b8a591979322fbdc637218a97ca468831910682de2"} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54eecb4170b6ce373f4c75b8a591979322fbdc637218a97ca468831910682de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54eecb4170b6ce373f4c75b8a591979322fbdc637218a97ca468831910682de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54eecb4170b6ce373f4c75b8a591979322fbdc637218a97ca468831910682de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4c1c9452fae77d072c14416906526806b39bc9b9d76853024a285fb1727b04"} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54eecb4170b6ce373f4c75b8a591979322fbdc637218a97ca468831910682de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54eecb4170b6ce373f4c75b8a591979322fbdc637218a97ca468831910682de2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30"} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128"} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54eecb4170b6ce373f4c75b8a591979322fbdc637218a97ca468831910682de2"} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa"} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55"} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98"} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa"} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55"} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98"} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa"} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55"} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98"} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55"} {"level":"info","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98"} {"level":"error","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e4ec776-620d-45e1-a6a9-06e796a91100","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59738","PortSpecifier":{"PortValue":59738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e4ec776-620d-45e1-a6a9-06e796a91100","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e4ec776-620d-45e1-a6a9-06e796a91100","object":"source:{address:{socket_address:{address:\"10.132.0.14:59738\" port_value:59738}}} destination:{address:{socket_address:{address:\"10.134.0.58:443\" port_value:443}}} request:{time:{seconds:1785859741 nanos:49278012} http:{id:\"1e4ec776-620d-45e1-a6a9-06e796a91100\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.14\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS02N2ExNWYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1hLTY3YTE1Zi1vcGVuc2hpZnQtZGVmYXVsdC05NDZiZDhjYzYtcDY1am4KIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWEtNjdhMTVmLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1hLTY3YTE1Zi1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.58~e2e-shared-a-67a15f-openshift-default-946bd8cc6-p65jn.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.14\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"1e4ec776-620d-45e1-a6a9-06e796a91100\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"34c96fa2d7c0c277c36162ca30b49fc49afc4bacf46e523922475b4771e36b22\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e4ec776-620d-45e1-a6a9-06e796a91100","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e4ec776-620d-45e1-a6a9-06e796a91100","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3dd27fe59693"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e54dd26f-881c-4f64-be49-f29c2d3c299c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"da7dd23c-34d9-4999-b4d1-b867d90d0169","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e4ec776-620d-45e1-a6a9-06e796a91100","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3dd27fe59693"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e54dd26f-881c-4f64-be49-f29c2d3c299c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"da7dd23c-34d9-4999-b4d1-b867d90d0169","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34c96fa2d7c0c277c36162ca30b49fc49afc4bacf46e523922475b4771e36b22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.58~e2e-shared-a-67a15f-openshift-default-946bd8cc6-p65jn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1e4ec776-620d-45e1-a6a9-06e796a91100"},"host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"1e4ec776-620d-45e1-a6a9-06e796a91100","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":49278012,"seconds":1785859741}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59738},"address":"10.132.0.14:59738"}}}}},"destination":{"address":"10.134.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"34c96fa2d7c0c277c36162ca30b49fc49afc4bacf46e523922475b4771e36b22"},"headers":{":authority":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.58~e2e-shared-a-67a15f-openshift-default-946bd8cc6-p65jn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1e4ec776-620d-45e1-a6a9-06e796a91100"},"host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"1e4ec776-620d-45e1-a6a9-06e796a91100","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":49278012,"seconds":1785859741},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:59738","port":59738}}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e4ec776-620d-45e1-a6a9-06e796a91100","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e4ec776-620d-45e1-a6a9-06e796a91100","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e4ec776-620d-45e1-a6a9-06e796a91100","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67a15f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e4ec776-620d-45e1-a6a9-06e796a91100","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e4ec776-620d-45e1-a6a9-06e796a91100","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e4ec776-620d-45e1-a6a9-06e796a91100","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e4ec776-620d-45e1-a6a9-06e796a91100","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e4ec776-620d-45e1-a6a9-06e796a91100","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60528","PortSpecifier":{"PortValue":60528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","object":"source:{address:{socket_address:{address:\"10.132.0.14:60528\" port_value:60528}}} destination:{address:{socket_address:{address:\"10.134.0.59:443\" port_value:443}}} request:{time:{seconds:1785859741 nanos:93168302} http:{id:\"d859d2c3-b0a8-45de-aaef-e9114287f46d\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-4d9499.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.14\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.59~e2e-shared-b-4d9499-openshift-default-5f568d6df6-n2dmt.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.14\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"d859d2c3-b0a8-45de-aaef-e9114287f46d\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3dd27fe59693"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e54dd26f-881c-4f64-be49-f29c2d3c299c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"da7dd23c-34d9-4999-b4d1-b867d90d0169","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3dd27fe59693"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e54dd26f-881c-4f64-be49-f29c2d3c299c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"da7dd23c-34d9-4999-b4d1-b867d90d0169","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-4d9499.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-4d9499-openshift-default-5f568d6df6-n2dmt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d859d2c3-b0a8-45de-aaef-e9114287f46d"},"host":"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":93168302,"seconds":1785859741}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60528},"address":"10.132.0.14:60528"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa"},"headers":{":authority":"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-4d9499.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi00ZDk0OTktb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTRkOTQ5OS1vcGVuc2hpZnQtZGVmYXVsdC01ZjU2OGQ2ZGY2LW4yZG10CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTRkOTQ5OS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi00ZDk0OTktb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-4d9499-openshift-default-5f568d6df6-n2dmt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d859d2c3-b0a8-45de-aaef-e9114287f46d"},"host":"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":93168302,"seconds":1785859741},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:60528","port":60528}}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4d9499/rate-test-model-4d9499\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4d9499/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d859d2c3-b0a8-45de-aaef-e9114287f46d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59740","PortSpecifier":{"PortValue":59740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","method":"POST","path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions","host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","object":"source:{address:{socket_address:{address:\"10.132.0.14:59740\" port_value:59740}}} destination:{address:{socket_address:{address:\"10.134.0.58:443\" port_value:443}}} request:{time:{seconds:1785859741 nanos:140274457} http:{id:\"4de79ea8-85bb-4d0b-8ee2-1075112aaa39\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-67a15f-kserve-workload-svc.ai-tenant-e2e-shared-a-67a15f.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.14\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.58~e2e-shared-a-67a15f-openshift-default-946bd8cc6-p65jn.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.14\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"4de79ea8-85bb-4d0b-8ee2-1075112aaa39\"} path:\"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions\" host:\"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"55475eed34d1f5efc543ee6163734b4500e890631f6ad3d6b82ffeb8b4f48ced\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LOqloQnj8niMhKa0_YogHg9T46nbiKDlKFfCcV1vY6kaPi1Nj9Z3poo0VX5g"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"909bcf6c-0d7d-4f1a-8fa9-e187c3d2fc76","keyName":"e2e-rate-a-7da791","subscription":"e2e-rate-iso-a-7da791","tenant":"e2e-shared-a-67a15f","userId":"909bcf6c-0d7d-4f1a-8fa9-e187c3d2fc76","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-67a15f/models/facebook/opt-125m","name":"rate-test-model-67a15f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7da791","namespace":"ai-tenant-e2e-shared-a-67a15f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f"}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-67a15f-kserve-workload-svc.ai-tenant-e2e-shared-a-67a15f.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.58~e2e-shared-a-67a15f-openshift-default-946bd8cc6-p65jn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39"},"host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","method":"POST","path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":140274457,"seconds":1785859741}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59740},"address":"10.132.0.14:59740"}}}}},"destination":{"address":"10.134.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"55475eed34d1f5efc543ee6163734b4500e890631f6ad3d6b82ffeb8b4f48ced"},"headers":{":authority":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-67a15f-kserve-workload-svc.ai-tenant-e2e-shared-a-67a15f.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.58~e2e-shared-a-67a15f-openshift-default-946bd8cc6-p65jn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39"},"host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","method":"POST","path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":140274457,"seconds":1785859741},"url_path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:59740","port":59740}}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67a15f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7da791"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"909bcf6c-0d7d-4f1a-8fa9-e187c3d2fc76","keyName":"e2e-rate-a-7da791","selected_subscription":"e2e-rate-iso-a-7da791","selected_subscription_key":"ai-tenant-e2e-shared-a-67a15f/e2e-rate-iso-a-7da791@ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-67a15f/models/facebook/opt-125m","name":"rate-test-model-67a15f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7da791","namespace":"ai-tenant-e2e-shared-a-67a15f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:09:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4de79ea8-85bb-4d0b-8ee2-1075112aaa39","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59752","PortSpecifier":{"PortValue":59752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"365f9d06-739a-4964-9247-9a06dadde8c0","method":"POST","path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions","host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","object":"source:{address:{socket_address:{address:\"10.132.0.14:59752\" port_value:59752}}} destination:{address:{socket_address:{address:\"10.134.0.58:443\" port_value:443}}} request:{time:{seconds:1785859742 nanos:188758790} http:{id:\"365f9d06-739a-4964-9247-9a06dadde8c0\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-67a15f-kserve-workload-svc.ai-tenant-e2e-shared-a-67a15f.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.14\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.58~e2e-shared-a-67a15f-openshift-default-946bd8cc6-p65jn.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.14\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"365f9d06-739a-4964-9247-9a06dadde8c0\"} path:\"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions\" host:\"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"55475eed34d1f5efc543ee6163734b4500e890631f6ad3d6b82ffeb8b4f48ced\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LOqloQnj8niMhKa0_YogHg9T46nbiKDlKFfCcV1vY6kaPi1Nj9Z3poo0VX5g"} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"909bcf6c-0d7d-4f1a-8fa9-e187c3d2fc76","keyName":"e2e-rate-a-7da791","subscription":"e2e-rate-iso-a-7da791","tenant":"e2e-shared-a-67a15f","userId":"909bcf6c-0d7d-4f1a-8fa9-e187c3d2fc76","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-67a15f/models/facebook/opt-125m","name":"rate-test-model-67a15f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7da791","namespace":"ai-tenant-e2e-shared-a-67a15f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f"}} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-67a15f-kserve-workload-svc.ai-tenant-e2e-shared-a-67a15f.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.58~e2e-shared-a-67a15f-openshift-default-946bd8cc6-p65jn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"365f9d06-739a-4964-9247-9a06dadde8c0"},"host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"365f9d06-739a-4964-9247-9a06dadde8c0","method":"POST","path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":188758790,"seconds":1785859742}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59752},"address":"10.132.0.14:59752"}}}}},"destination":{"address":"10.134.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"55475eed34d1f5efc543ee6163734b4500e890631f6ad3d6b82ffeb8b4f48ced"},"headers":{":authority":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-67a15f-kserve-workload-svc.ai-tenant-e2e-shared-a-67a15f.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.58~e2e-shared-a-67a15f-openshift-default-946bd8cc6-p65jn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"365f9d06-739a-4964-9247-9a06dadde8c0"},"host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"365f9d06-739a-4964-9247-9a06dadde8c0","method":"POST","path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":188758790,"seconds":1785859742},"url_path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:59752","port":59752}}} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67a15f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7da791"} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"909bcf6c-0d7d-4f1a-8fa9-e187c3d2fc76","keyName":"e2e-rate-a-7da791","selected_subscription":"e2e-rate-iso-a-7da791","selected_subscription_key":"ai-tenant-e2e-shared-a-67a15f/e2e-rate-iso-a-7da791@ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-67a15f/models/facebook/opt-125m","name":"rate-test-model-67a15f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7da791","namespace":"ai-tenant-e2e-shared-a-67a15f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:09:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"365f9d06-739a-4964-9247-9a06dadde8c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59754","PortSpecifier":{"PortValue":59754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","method":"POST","path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions","host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","object":"source:{address:{socket_address:{address:\"10.132.0.14:59754\" port_value:59754}}} destination:{address:{socket_address:{address:\"10.134.0.58:443\" port_value:443}}} request:{time:{seconds:1785859743 nanos:229510868} http:{id:\"d96941d2-126c-49f4-ad3f-e975a6ddc421\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-67a15f-kserve-workload-svc.ai-tenant-e2e-shared-a-67a15f.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.14\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS02N2ExNWYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1hLTY3YTE1Zi1vcGVuc2hpZnQtZGVmYXVsdC05NDZiZDhjYzYtcDY1am4KIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWEtNjdhMTVmLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1hLTY3YTE1Zi1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.58~e2e-shared-a-67a15f-openshift-default-946bd8cc6-p65jn.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.14\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"d96941d2-126c-49f4-ad3f-e975a6ddc421\"} path:\"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions\" host:\"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"55475eed34d1f5efc543ee6163734b4500e890631f6ad3d6b82ffeb8b4f48ced\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LOqloQnj8niMhKa0_YogHg9T46nbiKDlKFfCcV1vY6kaPi1Nj9Z3poo0VX5g"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"909bcf6c-0d7d-4f1a-8fa9-e187c3d2fc76","keyName":"e2e-rate-a-7da791","subscription":"e2e-rate-iso-a-7da791","tenant":"e2e-shared-a-67a15f","userId":"909bcf6c-0d7d-4f1a-8fa9-e187c3d2fc76","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-67a15f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-67a15f/models/facebook/opt-125m","name":"rate-test-model-67a15f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7da791","namespace":"ai-tenant-e2e-shared-a-67a15f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f"}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-67a15f-kserve-workload-svc.ai-tenant-e2e-shared-a-67a15f.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.58~e2e-shared-a-67a15f-openshift-default-946bd8cc6-p65jn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d96941d2-126c-49f4-ad3f-e975a6ddc421"},"host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","method":"POST","path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":229510868,"seconds":1785859743}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59754},"address":"10.132.0.14:59754"}}}}},"destination":{"address":"10.134.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"55475eed34d1f5efc543ee6163734b4500e890631f6ad3d6b82ffeb8b4f48ced"},"headers":{":authority":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-67a15f-kserve-workload-svc.ai-tenant-e2e-shared-a-67a15f.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS02N2ExNWYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1hLTY3YTE1Zi1vcGVuc2hpZnQtZGVmYXVsdC05NDZiZDhjYzYtcDY1am4KIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWEtNjdhMTVmLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1hLTY3YTE1Zi1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.58~e2e-shared-a-67a15f-openshift-default-946bd8cc6-p65jn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d96941d2-126c-49f4-ad3f-e975a6ddc421"},"host":"e2e-shared-a-67a15f.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","method":"POST","path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":229510868,"seconds":1785859743},"url_path":"/ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:59754","port":59754}}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-67a15f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7da791"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"909bcf6c-0d7d-4f1a-8fa9-e187c3d2fc76","keyName":"e2e-rate-a-7da791","selected_subscription":"e2e-rate-iso-a-7da791","selected_subscription_key":"ai-tenant-e2e-shared-a-67a15f/e2e-rate-iso-a-7da791@ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-67a15f/models/facebook/opt-125m","name":"rate-test-model-67a15f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7da791","namespace":"ai-tenant-e2e-shared-a-67a15f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-67a15f/rate-test-model-67a15f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d96941d2-126c-49f4-ad3f-e975a6ddc421","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34394","PortSpecifier":{"PortValue":34394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","method":"POST","path":"/ai-tenant-e2e-shared-b-4d9499/rate-test-model-4d9499/v1/completions","host":"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","object":"source:{address:{socket_address:{address:\"10.132.0.14:34394\" port_value:34394}}} destination:{address:{socket_address:{address:\"10.134.0.59:443\" port_value:443}}} request:{time:{seconds:1785859743 nanos:265874616} http:{id:\"ecb43b1c-b1f4-4af4-b9dd-db828c53702f\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-4d9499/rate-test-model-4d9499/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-4d9499-kserve-workload-svc.ai-tenant-e2e-shared-b-4d9499.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.14\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.59~e2e-shared-b-4d9499-openshift-default-5f568d6df6-n2dmt.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.14\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"ecb43b1c-b1f4-4af4-b9dd-db828c53702f\"} path:\"/ai-tenant-e2e-shared-b-4d9499/rate-test-model-4d9499/v1/completions\" host:\"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"ed4c1c9452fae77d072c14416906526806b39bc9b9d76853024a285fb1727b04\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gZulNq7rtJPhITK6_LA3DLfGRCseGM3XE22UMym7p0uQ9BmoWjSezDZNaNk1"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4d9499.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4d9499.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ca411560-ec60-40e8-8339-925cca55d227","keyName":"e2e-rate-b-7da791","subscription":"e2e-rate-iso-b-7da791","tenant":"e2e-shared-b-4d9499","userId":"ca411560-ec60-40e8-8339-925cca55d227","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-4d9499.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4d9499.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-4d9499/models/facebook/opt-125m","name":"rate-test-model-4d9499","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7da791","namespace":"ai-tenant-e2e-shared-b-4d9499","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-4d9499/rate-test-model-4d9499"}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-4d9499-kserve-workload-svc.ai-tenant-e2e-shared-b-4d9499.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi00ZDk0OTktb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTRkOTQ5OS1vcGVuc2hpZnQtZGVmYXVsdC01ZjU2OGQ2ZGY2LW4yZG10CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTRkOTQ5OS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi00ZDk0OTktb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-4d9499-openshift-default-5f568d6df6-n2dmt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f"},"host":"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","method":"POST","path":"/ai-tenant-e2e-shared-b-4d9499/rate-test-model-4d9499/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":265874616,"seconds":1785859743}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":34394},"address":"10.132.0.14:34394"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"ed4c1c9452fae77d072c14416906526806b39bc9b9d76853024a285fb1727b04"},"headers":{":authority":"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-4d9499/rate-test-model-4d9499/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-4d9499-kserve-workload-svc.ai-tenant-e2e-shared-b-4d9499.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-4d9499-openshift-default-5f568d6df6-n2dmt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f"},"host":"e2e-shared-b-4d9499.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","method":"POST","path":"/ai-tenant-e2e-shared-b-4d9499/rate-test-model-4d9499/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":265874616,"seconds":1785859743},"url_path":"/ai-tenant-e2e-shared-b-4d9499/rate-test-model-4d9499/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:34394","port":34394}}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4d9499/rate-test-model-4d9499\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4d9499/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-7da791"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ca411560-ec60-40e8-8339-925cca55d227","keyName":"e2e-rate-b-7da791","selected_subscription":"e2e-rate-iso-b-7da791","selected_subscription_key":"ai-tenant-e2e-shared-b-4d9499/e2e-rate-iso-b-7da791@ai-tenant-e2e-shared-b-4d9499/rate-test-model-4d9499","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-4d9499/models/facebook/opt-125m","name":"rate-test-model-4d9499","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7da791","namespace":"ai-tenant-e2e-shared-b-4d9499","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-4d9499/rate-test-model-4d9499"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecb43b1c-b1f4-4af4-b9dd-db828c53702f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:09:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54eecb4170b6ce373f4c75b8a591979322fbdc637218a97ca468831910682de2"} {"level":"info","ts":"2026-08-04T16:09:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d263e94445b51e3ee2ae97e2eb904b81ecd4477ebf28b12902d1066e63292d55"} {"level":"info","ts":"2026-08-04T16:09:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c258a483a9174879a0c8d1d5c66b7e7972429750f274df33c98f0dee9f7b814"} {"level":"info","ts":"2026-08-04T16:09:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34c96fa2d7c0c277c36162ca30b49fc49afc4bacf46e523922475b4771e36b22"} {"level":"info","ts":"2026-08-04T16:09:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/076e76026e825b6de31667a7cb129184bcd72f85c2fa8b3a12b93197443ebfb4"} {"level":"info","ts":"2026-08-04T16:09:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bb311ee8607452ba866fc614413f19d0265a75ecfafc4a9df4736f7e399bf0a"} {"level":"info","ts":"2026-08-04T16:09:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5150f12c1318b1afc41b7115b77717b301ea0f69e9c3756a2dee86efc6244aa"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed4c1c9452fae77d072c14416906526806b39bc9b9d76853024a285fb1727b04"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c62fd0197c88013532122385b9c11a073966d376cb8e51f27518c2afb98f3e52"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b3926ff748ba3049552d45a7deac77957dd988f6f89297abb5ce7a94fb2a6db"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9be9e6272c0209102a76afe51b1bfe7c9f26e93851b1decdc8a5442818f216ab"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb876dcc6ecc2c66ba8a86b987ee677deab9a0f49b97705d9dcad623ac9416b6"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed33874a636509c8721f65770e4c4c2e9ee05ebe79167f9817bf852d82134c98"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eda9736658d8a0d4aa9896eeea0ef54ee31060b5a3b22186deee8ad32a5a5863"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d4d5f39384f9e5cf60828716b86e1f08e712020627764ac1bd773d0136af128"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd542cf0f310f2d09a8d3d7196813de2d4d38d010d9f1389bccca92f477c54dd"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b8e285e1e00100f82082f32b2bec0c2ea322d50fc436c370c5ed905caff38a2"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75906e18f3dd8aab87f76c63d09593de4c5017018ce843d19e11bcd4f8dce828"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34c0b3ab80093f123f2e383112777f0baf40922c8cf69a2e28ddafa1f0e2cb30"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b16f541d478c41b440cf1ec3282a12316f23449c9fff4d912a4568a74702fd3a"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62a8f04b6ea1d045c4f8757ca4cefc9d334dad9922325dfa983b99a69b058adc"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55475eed34d1f5efc543ee6163734b4500e890631f6ad3d6b82ffeb8b4f48ced"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f200cb2883e2f3e09b93747069df675ffe58a69d4aa6cf3cec0307fe58d6e004"} {"level":"info","ts":"2026-08-04T16:09:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2729ff59b2158ce3dcd79b4d6098c1c5fc5f71d8f1f39598c060f7fad444f771"} {"level":"info","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45478","PortSpecifier":{"PortValue":45478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","object":"source:{address:{socket_address:{address:\"10.132.0.14:45478\" port_value:45478}}} destination:{address:{socket_address:{address:\"10.134.0.35:443\" port_value:443}}} request:{time:{seconds:1785859828 nanos:254003528} http:{id:\"6598b004-6d87-4fe0-bd77-609b3da1bf4c\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.14\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.35~maas-default-gateway-openshift-default-5ccb968c66-fxmtc.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.14\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"6598b004-6d87-4fe0-bd77-609b3da1bf4c\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3dd27fe59693"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e54dd26f-881c-4f64-be49-f29c2d3c299c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"da7dd23c-34d9-4999-b4d1-b867d90d0169","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3dd27fe59693"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e54dd26f-881c-4f64-be49-f29c2d3c299c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"da7dd23c-34d9-4999-b4d1-b867d90d0169","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=34.228.250.194;host=maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.35~maas-default-gateway-openshift-default-5ccb968c66-fxmtc.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c"},"host":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":254003528,"seconds":1785859828}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":45478},"address":"10.132.0.14:45478"}}}}},"destination":{"address":"10.134.0.35:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=34.228.250.194;host=maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC01Y2NiOTY4YzY2LWZ4bXRjCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.35~maas-default-gateway-openshift-default-5ccb968c66-fxmtc.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c"},"host":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":254003528,"seconds":1785859828},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:45478","port":45478}}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6598b004-6d87-4fe0-bd77-609b3da1bf4c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45486","PortSpecifier":{"PortValue":45486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","object":"source:{address:{socket_address:{address:\"10.132.0.14:45486\" port_value:45486}}} destination:{address:{socket_address:{address:\"10.134.0.35:443\" port_value:443}}} request:{time:{seconds:1785859828 nanos:309307325} http:{id:\"71a72427-b8e2-4a58-a3ea-bbd42edb44f2\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.14\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.35~maas-default-gateway-openshift-default-5ccb968c66-fxmtc.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.14\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"71a72427-b8e2-4a58-a3ea-bbd42edb44f2\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ePyNW8DrCJGhS7H2_jeUnnDYPX4zV8ASaWsDX5QHPp363FMRNBcPifiqKMGT"} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"261bc2a2-0d70-48c7-a26a-7b1b89257a9e","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"261bc2a2-0d70-48c7-a26a-7b1b89257a9e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.35~maas-default-gateway-openshift-default-5ccb968c66-fxmtc.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2"},"host":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":309307325,"seconds":1785859828}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":45486},"address":"10.132.0.14:45486"}}}}},"destination":{"address":"10.134.0.35:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.35~maas-default-gateway-openshift-default-5ccb968c66-fxmtc.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2"},"host":"maas.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":309307325,"seconds":1785859828},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:45486","port":45486}}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"261bc2a2-0d70-48c7-a26a-7b1b89257a9e","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71a72427-b8e2-4a58-a3ea-bbd42edb44f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81"} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81"} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81"} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81"} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4"} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4"} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4"} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81"} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a"} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4"} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"} {"level":"error","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a"} {"level":"error","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5"} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79e7615f01033907775bea9dedf047df4c4995580f130e57c4e6a4b3b7082a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79e7615f01033907775bea9dedf047df4c4995580f130e57c4e6a4b3b7082a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79e7615f01033907775bea9dedf047df4c4995580f130e57c4e6a4b3b7082a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79e7615f01033907775bea9dedf047df4c4995580f130e57c4e6a4b3b7082a3"} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79e7615f01033907775bea9dedf047df4c4995580f130e57c4e6a4b3b7082a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79e7615f01033907775bea9dedf047df4c4995580f130e57c4e6a4b3b7082a3"} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79e7615f01033907775bea9dedf047df4c4995580f130e57c4e6a4b3b7082a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f79e7615f01033907775bea9dedf047df4c4995580f130e57c4e6a4b3b7082a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79e7615f01033907775bea9dedf047df4c4995580f130e57c4e6a4b3b7082a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79e7615f01033907775bea9dedf047df4c4995580f130e57c4e6a4b3b7082a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79e7615f01033907775bea9dedf047df4c4995580f130e57c4e6a4b3b7082a3"} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542"} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542"} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4a55f30dedebd7121f99d13137f3b701932b01a0f72f6912d3a86c013a2cc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4a55f30dedebd7121f99d13137f3b701932b01a0f72f6912d3a86c013a2cc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2892638a6e21ba95b8cc99ee06de021e409094ff0be57b5ff0d7e139b9d7951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4a55f30dedebd7121f99d13137f3b701932b01a0f72f6912d3a86c013a2cc1"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2892638a6e21ba95b8cc99ee06de021e409094ff0be57b5ff0d7e139b9d7951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4a55f30dedebd7121f99d13137f3b701932b01a0f72f6912d3a86c013a2cc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed4a55f30dedebd7121f99d13137f3b701932b01a0f72f6912d3a86c013a2cc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2892638a6e21ba95b8cc99ee06de021e409094ff0be57b5ff0d7e139b9d7951"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4a55f30dedebd7121f99d13137f3b701932b01a0f72f6912d3a86c013a2cc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2892638a6e21ba95b8cc99ee06de021e409094ff0be57b5ff0d7e139b9d7951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2892638a6e21ba95b8cc99ee06de021e409094ff0be57b5ff0d7e139b9d7951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2892638a6e21ba95b8cc99ee06de021e409094ff0be57b5ff0d7e139b9d7951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed4a55f30dedebd7121f99d13137f3b701932b01a0f72f6912d3a86c013a2cc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e"} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2892638a6e21ba95b8cc99ee06de021e409094ff0be57b5ff0d7e139b9d7951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4a55f30dedebd7121f99d13137f3b701932b01a0f72f6912d3a86c013a2cc1"} {"level":"info","ts":"2026-08-04T16:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2892638a6e21ba95b8cc99ee06de021e409094ff0be57b5ff0d7e139b9d7951"} {"level":"info","ts":"2026-08-04T16:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e"} {"level":"info","ts":"2026-08-04T16:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:11:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:11:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e"} {"level":"error","ts":"2026-08-04T16:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T16:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:11:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"defded58-d599-4909-9860-f97ee11cd7fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55098","PortSpecifier":{"PortValue":55098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"defded58-d599-4909-9860-f97ee11cd7fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:11:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"defded58-d599-4909-9860-f97ee11cd7fc","object":"source:{address:{socket_address:{address:\"10.132.0.14:55098\" port_value:55098}}} destination:{address:{socket_address:{address:\"10.134.0.62:443\" port_value:443}}} request:{time:{seconds:1785859882 nanos:296918078} http:{id:\"defded58-d599-4909-9860-f97ee11cd7fc\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-8ff9cf.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.14\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.62~e2e-ipp-a-8ff9cf-openshift-default-756d54ffb6-xckks.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.14\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"defded58-d599-4909-9860-f97ee11cd7fc\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:11:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"defded58-d599-4909-9860-f97ee11cd7fc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T16:11:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"defded58-d599-4909-9860-f97ee11cd7fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3dd27fe59693"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e54dd26f-881c-4f64-be49-f29c2d3c299c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"da7dd23c-34d9-4999-b4d1-b867d90d0169","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"defded58-d599-4909-9860-f97ee11cd7fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3dd27fe59693"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e54dd26f-881c-4f64-be49-f29c2d3c299c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"da7dd23c-34d9-4999-b4d1-b867d90d0169","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-8ff9cf.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.62~e2e-ipp-a-8ff9cf-openshift-default-756d54ffb6-xckks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"defded58-d599-4909-9860-f97ee11cd7fc"},"host":"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"defded58-d599-4909-9860-f97ee11cd7fc","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":296918078,"seconds":1785859882}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55098},"address":"10.132.0.14:55098"}}}}},"destination":{"address":"10.134.0.62:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542"},"headers":{":authority":"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-8ff9cf.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.62~e2e-ipp-a-8ff9cf-openshift-default-756d54ffb6-xckks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"defded58-d599-4909-9860-f97ee11cd7fc"},"host":"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"defded58-d599-4909-9860-f97ee11cd7fc","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":296918078,"seconds":1785859882},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:55098","port":55098}}} {"level":"debug","ts":"2026-08-04T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"defded58-d599-4909-9860-f97ee11cd7fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"defded58-d599-4909-9860-f97ee11cd7fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:11:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"defded58-d599-4909-9860-f97ee11cd7fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-8ff9cf/ipp-route-8ff9cf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-8ff9cf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"defded58-d599-4909-9860-f97ee11cd7fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"defded58-d599-4909-9860-f97ee11cd7fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:11:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"defded58-d599-4909-9860-f97ee11cd7fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T16:11:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"defded58-d599-4909-9860-f97ee11cd7fc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:11:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"defded58-d599-4909-9860-f97ee11cd7fc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69797848-4a69-4953-9c35-f53a38bb8079","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55744","PortSpecifier":{"PortValue":55744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69797848-4a69-4953-9c35-f53a38bb8079","method":"POST","path":"/ai-tenant-e2e-ipp-a-8ff9cf/ipp-route-8ff9cf/v1/chat/completions","host":"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69797848-4a69-4953-9c35-f53a38bb8079","object":"source:{address:{socket_address:{address:\"10.132.0.14:55744\" port_value:55744}}} destination:{address:{socket_address:{address:\"10.134.0.62:443\" port_value:443}}} request:{time:{seconds:1785859884 nanos:361409808} http:{id:\"69797848-4a69-4953-9c35-f53a38bb8079\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-8ff9cf/ipp-route-8ff9cf/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-8ff9cf-kserve-workload-svc.ai-tenant-e2e-ipp-a-8ff9cf.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.14\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.62~e2e-ipp-a-8ff9cf-openshift-default-756d54ffb6-xckks.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.14\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"69797848-4a69-4953-9c35-f53a38bb8079\"} path:\"/ai-tenant-e2e-ipp-a-8ff9cf/ipp-route-8ff9cf/v1/chat/completions\" host:\"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69797848-4a69-4953-9c35-f53a38bb8079","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Lf8sM4WqZVIEIUcK_7NYiCRnR0aQfr4VhacJHxuLRjmSyssythhSchdCOgZw"} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69797848-4a69-4953-9c35-f53a38bb8079","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-8ff9cf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69797848-4a69-4953-9c35-f53a38bb8079","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-8ff9cf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"502880b3-5ff6-47ed-a814-a68ffefab6a2","keyName":"e2e-ipp-8ff9cf","subscription":"ipp-route-8ff9cf-sub","tenant":"e2e-ipp-a-8ff9cf","userId":"502880b3-5ff6-47ed-a814-a68ffefab6a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69797848-4a69-4953-9c35-f53a38bb8079","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-8ff9cf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69797848-4a69-4953-9c35-f53a38bb8079","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-8ff9cf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-8ff9cf/models/facebook/opt-125m","name":"ipp-route-8ff9cf","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-8ff9cf-sub","namespace":"ai-tenant-e2e-ipp-a-8ff9cf","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-8ff9cf/ipp-route-8ff9cf"}} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69797848-4a69-4953-9c35-f53a38bb8079","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-8ff9cf-kserve-workload-svc.ai-tenant-e2e-ipp-a-8ff9cf.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.62~e2e-ipp-a-8ff9cf-openshift-default-756d54ffb6-xckks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"69797848-4a69-4953-9c35-f53a38bb8079"},"host":"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"69797848-4a69-4953-9c35-f53a38bb8079","method":"POST","path":"/ai-tenant-e2e-ipp-a-8ff9cf/ipp-route-8ff9cf/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":361409808,"seconds":1785859884}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55744},"address":"10.132.0.14:55744"}}}}},"destination":{"address":"10.134.0.62:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4"},"headers":{":authority":"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-8ff9cf/ipp-route-8ff9cf/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-8ff9cf-kserve-workload-svc.ai-tenant-e2e-ipp-a-8ff9cf.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS04ZmY5Y2Ytb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLThmZjljZi1vcGVuc2hpZnQtZGVmYXVsdC03NTZkNTRmZmI2LXhja2tzCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLThmZjljZi1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS04ZmY5Y2Ytb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.62~e2e-ipp-a-8ff9cf-openshift-default-756d54ffb6-xckks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.14","x-forwarded-host":"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"69797848-4a69-4953-9c35-f53a38bb8079"},"host":"e2e-ipp-a-8ff9cf.apps.25664a1d-dee9-4c18-ba65-3dd27fe59693.prod.konfluxeaas.com","id":"69797848-4a69-4953-9c35-f53a38bb8079","method":"POST","path":"/ai-tenant-e2e-ipp-a-8ff9cf/ipp-route-8ff9cf/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":361409808,"seconds":1785859884},"url_path":"/ai-tenant-e2e-ipp-a-8ff9cf/ipp-route-8ff9cf/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:55744","port":55744}}} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69797848-4a69-4953-9c35-f53a38bb8079","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69797848-4a69-4953-9c35-f53a38bb8079","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69797848-4a69-4953-9c35-f53a38bb8079","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-8ff9cf/ipp-route-8ff9cf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-8ff9cf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69797848-4a69-4953-9c35-f53a38bb8079","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69797848-4a69-4953-9c35-f53a38bb8079","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69797848-4a69-4953-9c35-f53a38bb8079","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-8ff9cf-sub"} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69797848-4a69-4953-9c35-f53a38bb8079","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69797848-4a69-4953-9c35-f53a38bb8079","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"502880b3-5ff6-47ed-a814-a68ffefab6a2","keyName":"e2e-ipp-8ff9cf","selected_subscription":"ipp-route-8ff9cf-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-8ff9cf/ipp-route-8ff9cf-sub@ai-tenant-e2e-ipp-a-8ff9cf/ipp-route-8ff9cf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-8ff9cf/models/facebook/opt-125m","name":"ipp-route-8ff9cf","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-8ff9cf-sub","namespace":"ai-tenant-e2e-ipp-a-8ff9cf","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-8ff9cf/ipp-route-8ff9cf"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69797848-4a69-4953-9c35-f53a38bb8079","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:11:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69797848-4a69-4953-9c35-f53a38bb8079","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f79e7615f01033907775bea9dedf047df4c4995580f130e57c4e6a4b3b7082a3"} {"level":"info","ts":"2026-08-04T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f638cb4a5fc92d07585bbb033dd90d5411feaef4fc75314803779a18e4a90e81"} {"level":"info","ts":"2026-08-04T16:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/823bcc3163f1ea49dd3f612787e06875e941e5fdf7f7329684d0c955e3cbc4d5"} {"level":"info","ts":"2026-08-04T16:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9c0a83ebbbc50dbfdabbccc699295011425fdb01c4097e1a9ca6070507e5f0e"} {"level":"info","ts":"2026-08-04T16:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2892638a6e21ba95b8cc99ee06de021e409094ff0be57b5ff0d7e139b9d7951"} {"level":"info","ts":"2026-08-04T16:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4826cceb89587dd2afc8b95c9ab993b88f58f434e29a7116cc486d7477d3e04"} {"level":"info","ts":"2026-08-04T16:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bf8fa35d812a764a53de1fb72c882c3f9cb69391ebd386f05e27624c25b4dc4"} {"level":"info","ts":"2026-08-04T16:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed4a55f30dedebd7121f99d13137f3b701932b01a0f72f6912d3a86c013a2cc1"} {"level":"info","ts":"2026-08-04T16:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5668081c89e9a18677ca9fffebb294ffe3e58443047f93c32983a60261cfb3a"} {"level":"info","ts":"2026-08-04T16:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/233cf1837f754acbad83ff776e34982c162adf592a0b5ef63fea8792774f4542"} {"level":"info","ts":"2026-08-04T16:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57b32c9f5f87f1267c2824536b9402c333b267d89066eb673a1febc5ef534e9a"} {"level":"info","ts":"2026-08-04T16:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/def03852d936509e79f6e5e37e5d4cfd42277f9929af8b753a9501312816044a"}