{"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d4f6e447c6e5a4d0a484070826a540f31baddea7a232a2cc3c1033e3a7ac5a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d4f6e447c6e5a4d0a484070826a540f31baddea7a232a2cc3c1033e3a7ac5a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d4f6e447c6e5a4d0a484070826a540f31baddea7a232a2cc3c1033e3a7ac5a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d4f6e447c6e5a4d0a484070826a540f31baddea7a232a2cc3c1033e3a7ac5a9"} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d4f6e447c6e5a4d0a484070826a540f31baddea7a232a2cc3c1033e3a7ac5a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d4f6e447c6e5a4d0a484070826a540f31baddea7a232a2cc3c1033e3a7ac5a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b"} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d4f6e447c6e5a4d0a484070826a540f31baddea7a232a2cc3c1033e3a7ac5a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d4f6e447c6e5a4d0a484070826a540f31baddea7a232a2cc3c1033e3a7ac5a9"} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d4f6e447c6e5a4d0a484070826a540f31baddea7a232a2cc3c1033e3a7ac5a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b"} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d4f6e447c6e5a4d0a484070826a540f31baddea7a232a2cc3c1033e3a7ac5a9"} {"level":"error","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b"} {"level":"error","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b"} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c545cd8bca8b4653e77a0189b0813a5407c8decb1a0cf1855639aa2d0d10e59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c545cd8bca8b4653e77a0189b0813a5407c8decb1a0cf1855639aa2d0d10e59e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c545cd8bca8b4653e77a0189b0813a5407c8decb1a0cf1855639aa2d0d10e59e"} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c545cd8bca8b4653e77a0189b0813a5407c8decb1a0cf1855639aa2d0d10e59e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c545cd8bca8b4653e77a0189b0813a5407c8decb1a0cf1855639aa2d0d10e59e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c545cd8bca8b4653e77a0189b0813a5407c8decb1a0cf1855639aa2d0d10e59e"} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c545cd8bca8b4653e77a0189b0813a5407c8decb1a0cf1855639aa2d0d10e59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c545cd8bca8b4653e77a0189b0813a5407c8decb1a0cf1855639aa2d0d10e59e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b"} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c545cd8bca8b4653e77a0189b0813a5407c8decb1a0cf1855639aa2d0d10e59e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c545cd8bca8b4653e77a0189b0813a5407c8decb1a0cf1855639aa2d0d10e59e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c545cd8bca8b4653e77a0189b0813a5407c8decb1a0cf1855639aa2d0d10e59e"} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e"} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e"} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e"} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600"} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b"} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600"} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07986012ef22122eb1c2358bd12590a934678922c1345d1f48159b9f277235e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b"} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07986012ef22122eb1c2358bd12590a934678922c1345d1f48159b9f277235e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07986012ef22122eb1c2358bd12590a934678922c1345d1f48159b9f277235e"} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f0ba9029b6960f05cbfc7cf0caa0a46682732a539467b425ac3f9faa4a3e279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f0ba9029b6960f05cbfc7cf0caa0a46682732a539467b425ac3f9faa4a3e279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07986012ef22122eb1c2358bd12590a934678922c1345d1f48159b9f277235e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07986012ef22122eb1c2358bd12590a934678922c1345d1f48159b9f277235e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b"} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07986012ef22122eb1c2358bd12590a934678922c1345d1f48159b9f277235e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f0ba9029b6960f05cbfc7cf0caa0a46682732a539467b425ac3f9faa4a3e279"} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f0ba9029b6960f05cbfc7cf0caa0a46682732a539467b425ac3f9faa4a3e279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f0ba9029b6960f05cbfc7cf0caa0a46682732a539467b425ac3f9faa4a3e279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f0ba9029b6960f05cbfc7cf0caa0a46682732a539467b425ac3f9faa4a3e279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07986012ef22122eb1c2358bd12590a934678922c1345d1f48159b9f277235e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00"} {"level":"info","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f0ba9029b6960f05cbfc7cf0caa0a46682732a539467b425ac3f9faa4a3e279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07986012ef22122eb1c2358bd12590a934678922c1345d1f48159b9f277235e"} {"level":"error","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b"} {"level":"info","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600"} {"level":"info","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f0ba9029b6960f05cbfc7cf0caa0a46682732a539467b425ac3f9faa4a3e279"} {"level":"info","ts":"2026-07-30T15:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00"} {"level":"info","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54016","PortSpecifier":{"PortValue":54016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-845a26.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54016","PortSpecifier":{"PortValue":54016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785426569,"nanos":154060501},"http":{"id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","method":"POST","headers":{":authority":"e2e-shared-a-845a26.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4de2161c-65dd-4b60-9ad6-8511bd853042","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=931fb456-d951-44c8-a0b6-e533cabfbff4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/25f21ce6a674"]}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/25f21ce6a674"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=931fb456-d951-44c8-a0b6-e533cabfbff4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4de2161c-65dd-4b60-9ad6-8511bd853042","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c84bf48f367c41684cc76a7556918106e03447062ac406414c14951abdfb04f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-845a26.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-845a26/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"439ebd56-74b4-47b8-a6e9-50b0f268ac9f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52592","PortSpecifier":{"PortValue":52592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2b1f1f.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52592","PortSpecifier":{"PortValue":52592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785426569,"nanos":193792755},"http":{"id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","method":"POST","headers":{":authority":"e2e-shared-b-2b1f1f.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4de2161c-65dd-4b60-9ad6-8511bd853042","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=931fb456-d951-44c8-a0b6-e533cabfbff4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/25f21ce6a674"]}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/25f21ce6a674"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=931fb456-d951-44c8-a0b6-e533cabfbff4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4de2161c-65dd-4b60-9ad6-8511bd853042","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2b1f1f.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2b1f1f/rate-test-model-2b1f1f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-2b1f1f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2104f465-9878-4d94-8cf4-c5b48b14ea52","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54018","PortSpecifier":{"PortValue":54018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","method":"POST","path":"/ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26/v1/completions","host":"e2e-shared-a-845a26.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54018","PortSpecifier":{"PortValue":54018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785426569,"nanos":238320986},"http":{"id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","method":"POST","headers":{":authority":"e2e-shared-a-845a26.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6wJaQnvFF7RGs1Nk_bT8BSmfouJLUz6g1VFdPzELbaGojaXK8UyCCMnVkMb3"} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-845a26.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6wJaQnvFF7RGs1Nk_bT8BSmfouJLUz6g1VFdPzELbaGojaXK8UyCCMnVkMb3\"}"} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-845a26.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb61e87b-be3d-40d8-b3be-2e2825a2aa07","keyName":"e2e-rate-a-c82bce","subscription":"e2e-rate-iso-a-c82bce","tenant":"e2e-shared-a-845a26","userId":"cb61e87b-be3d-40d8-b3be-2e2825a2aa07","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-845a26.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26\",\"requestedSubscription\":\"e2e-rate-iso-a-c82bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-845a26.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-845a26/models/facebook/opt-125m","name":"rate-test-model-845a26","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c82bce","namespace":"ai-tenant-e2e-shared-a-845a26","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26"}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-845a26/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c82bce"} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb61e87b-be3d-40d8-b3be-2e2825a2aa07","keyName":"e2e-rate-a-c82bce","selected_subscription":"e2e-rate-iso-a-c82bce","selected_subscription_key":"ai-tenant-e2e-shared-a-845a26/e2e-rate-iso-a-c82bce@ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-845a26/models/facebook/opt-125m","name":"rate-test-model-845a26","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c82bce","namespace":"ai-tenant-e2e-shared-a-845a26","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T15:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7bf7791-1121-4a80-9e70-7984fb50eeec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54028","PortSpecifier":{"PortValue":54028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54aafc10-6c8a-4244-b5af-372173f1f314","method":"POST","path":"/ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26/v1/completions","host":"e2e-shared-a-845a26.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54028","PortSpecifier":{"PortValue":54028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785426570,"nanos":279905589},"http":{"id":"54aafc10-6c8a-4244-b5af-372173f1f314","method":"POST","headers":{":authority":"e2e-shared-a-845a26.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6wJaQnvFF7RGs1Nk_bT8BSmfouJLUz6g1VFdPzELbaGojaXK8UyCCMnVkMb3"} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-845a26.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6wJaQnvFF7RGs1Nk_bT8BSmfouJLUz6g1VFdPzELbaGojaXK8UyCCMnVkMb3\"}"} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-845a26.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb61e87b-be3d-40d8-b3be-2e2825a2aa07","keyName":"e2e-rate-a-c82bce","subscription":"e2e-rate-iso-a-c82bce","tenant":"e2e-shared-a-845a26","userId":"cb61e87b-be3d-40d8-b3be-2e2825a2aa07","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-845a26.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26\",\"requestedSubscription\":\"e2e-rate-iso-a-c82bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-845a26.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-845a26/models/facebook/opt-125m","name":"rate-test-model-845a26","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c82bce","namespace":"ai-tenant-e2e-shared-a-845a26","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26"}} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-845a26/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c82bce"} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb61e87b-be3d-40d8-b3be-2e2825a2aa07","keyName":"e2e-rate-a-c82bce","selected_subscription":"e2e-rate-iso-a-c82bce","selected_subscription_key":"ai-tenant-e2e-shared-a-845a26/e2e-rate-iso-a-c82bce@ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-845a26/models/facebook/opt-125m","name":"rate-test-model-845a26","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c82bce","namespace":"ai-tenant-e2e-shared-a-845a26","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T15:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54aafc10-6c8a-4244-b5af-372173f1f314","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37628","PortSpecifier":{"PortValue":37628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","method":"POST","path":"/ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26/v1/completions","host":"e2e-shared-a-845a26.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37628","PortSpecifier":{"PortValue":37628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785426571,"nanos":324200609},"http":{"id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","method":"POST","headers":{":authority":"e2e-shared-a-845a26.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6wJaQnvFF7RGs1Nk_bT8BSmfouJLUz6g1VFdPzELbaGojaXK8UyCCMnVkMb3"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-845a26.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6wJaQnvFF7RGs1Nk_bT8BSmfouJLUz6g1VFdPzELbaGojaXK8UyCCMnVkMb3\"}"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-845a26.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb61e87b-be3d-40d8-b3be-2e2825a2aa07","keyName":"e2e-rate-a-c82bce","subscription":"e2e-rate-iso-a-c82bce","tenant":"e2e-shared-a-845a26","userId":"cb61e87b-be3d-40d8-b3be-2e2825a2aa07","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-845a26.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26\",\"requestedSubscription\":\"e2e-rate-iso-a-c82bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-845a26.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-845a26/models/facebook/opt-125m","name":"rate-test-model-845a26","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c82bce","namespace":"ai-tenant-e2e-shared-a-845a26","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26"}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-845a26/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c82bce"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb61e87b-be3d-40d8-b3be-2e2825a2aa07","keyName":"e2e-rate-a-c82bce","selected_subscription":"e2e-rate-iso-a-c82bce","selected_subscription_key":"ai-tenant-e2e-shared-a-845a26/e2e-rate-iso-a-c82bce@ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-845a26/models/facebook/opt-125m","name":"rate-test-model-845a26","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c82bce","namespace":"ai-tenant-e2e-shared-a-845a26","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-845a26/rate-test-model-845a26"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbfeb10a-610c-4c1f-b116-8643741b72a2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46410","PortSpecifier":{"PortValue":46410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"122a7412-b729-44b6-8c62-a94849df6c7c","method":"POST","path":"/ai-tenant-e2e-shared-b-2b1f1f/rate-test-model-2b1f1f/v1/completions","host":"e2e-shared-b-2b1f1f.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46410","PortSpecifier":{"PortValue":46410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785426571,"nanos":358445622},"http":{"id":"122a7412-b729-44b6-8c62-a94849df6c7c","method":"POST","headers":{":authority":"e2e-shared-b-2b1f1f.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-2b1f1f/rate-test-model-2b1f1f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mK16HmnBkuM9Sy4j_4897UrOXI2ONDLjPn1HaR7DMtSzQu1XzI40xi2xBIp0"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2b1f1f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mK16HmnBkuM9Sy4j_4897UrOXI2ONDLjPn1HaR7DMtSzQu1XzI40xi2xBIp0\"}"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2b1f1f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"18e6acf2-6675-47cf-9a74-18ea20c64d49","keyName":"e2e-rate-b-c82bce","subscription":"e2e-rate-iso-b-c82bce","tenant":"e2e-shared-b-2b1f1f","userId":"18e6acf2-6675-47cf-9a74-18ea20c64d49","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-2b1f1f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-2b1f1f/rate-test-model-2b1f1f\",\"requestedSubscription\":\"e2e-rate-iso-b-c82bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2b1f1f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-2b1f1f/models/facebook/opt-125m","name":"rate-test-model-2b1f1f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c82bce","namespace":"ai-tenant-e2e-shared-b-2b1f1f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-2b1f1f/rate-test-model-2b1f1f"}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2b1f1f/rate-test-model-2b1f1f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-2b1f1f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c82bce"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"18e6acf2-6675-47cf-9a74-18ea20c64d49","keyName":"e2e-rate-b-c82bce","selected_subscription":"e2e-rate-iso-b-c82bce","selected_subscription_key":"ai-tenant-e2e-shared-b-2b1f1f/e2e-rate-iso-b-c82bce@ai-tenant-e2e-shared-b-2b1f1f/rate-test-model-2b1f1f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-2b1f1f/models/facebook/opt-125m","name":"rate-test-model-2b1f1f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c82bce","namespace":"ai-tenant-e2e-shared-b-2b1f1f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-2b1f1f/rate-test-model-2b1f1f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T15:49:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"122a7412-b729-44b6-8c62-a94849df6c7c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T15:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/108bd3cb8bb642288ee14881da8229a332b64cea203ca71dedc880ab93d58578"} {"level":"info","ts":"2026-07-30T15:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/832dca075c024b7016180acec59f63da17632c618adcdada56183cbd33c2f43f"} {"level":"info","ts":"2026-07-30T15:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/955f73c24acea83fffd96e66dcd6544a8dfe724e787d2d80ff961b035547ec6b"} {"level":"info","ts":"2026-07-30T15:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13425b9a22bfb9bb93db2ecd5069f987852d6b7e420d8d42e2b262d631478593"} {"level":"info","ts":"2026-07-30T15:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c545cd8bca8b4653e77a0189b0813a5407c8decb1a0cf1855639aa2d0d10e59e"} {"level":"info","ts":"2026-07-30T15:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/715fac1301ceaa0ba97733f1e99b57e2014eb924c1e6bd77182f14d99ceb39fd"} {"level":"info","ts":"2026-07-30T15:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5a9d0d8965e441a3f2dc3e7e53dfc227303f514a7d199cc89095507a02b3c53"} {"level":"info","ts":"2026-07-30T15:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f02c877509d9c85f55ea0a22de7b0e40f954b0723145aec96bd53cd56d77e1b"} {"level":"info","ts":"2026-07-30T15:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ec174d7fcd9ae91f1cc5d71a2b211f633427122db661bfbb76489903beed92e"} {"level":"info","ts":"2026-07-30T15:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53dbc72501a4bcc122c841c8ea6033f1e07e5a8a52d172fba3f3c0f3e6e4b072"} {"level":"info","ts":"2026-07-30T15:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aad82465c49276cf51e138fa84ca4b4d13cc64092caf361e5f6538949e5c3f8"} {"level":"info","ts":"2026-07-30T15:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d4f6e447c6e5a4d0a484070826a540f31baddea7a232a2cc3c1033e3a7ac5a9"} {"level":"info","ts":"2026-07-30T15:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e69866b38f9d44cf71fa5dfcaf204f8c2bfafafd62018a68f05af3214f21491"} {"level":"info","ts":"2026-07-30T15:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e2dd1314b85985e11fb440f511196e91c7e24b0e7f82fbe254ab3222141e38e"} {"level":"info","ts":"2026-07-30T15:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a676b1e529194796cc60008d1464e145701f223cf8c69976690ba13f6648d2b"} {"level":"info","ts":"2026-07-30T15:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36d91a4d963e8481f6b8ff3620219feed0c6e15f8b8c7b104b90d9638c63be45"} {"level":"info","ts":"2026-07-30T15:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f0ba9029b6960f05cbfc7cf0caa0a46682732a539467b425ac3f9faa4a3e279"} {"level":"info","ts":"2026-07-30T15:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fff266022b95c2a1a0adb9d23c2119ace412252b5909630b7d60a79c0a75a600"} {"level":"info","ts":"2026-07-30T15:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c07986012ef22122eb1c2358bd12590a934678922c1345d1f48159b9f277235e"} {"level":"info","ts":"2026-07-30T15:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c84bf48f367c41684cc76a7556918106e03447062ac406414c14951abdfb04f3"} {"level":"info","ts":"2026-07-30T15:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/739c81c1f6e365a53531dfd3179646e223a038e9e203dc9748fbb8e546f65b88"} {"level":"info","ts":"2026-07-30T15:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fda059a762348bb7bbd7e6bf94a850e9f67b95f11c8b7a4b3391cca92916fe00"} {"level":"info","ts":"2026-07-30T15:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e18fdf6f6bd05a440c30146bdfb57de0993c599a5eec65ec0731c1a8a6101cd0"} {"level":"info","ts":"2026-07-30T15:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/288a1957ac2ed630696343ffb67127d8e1557cfc94f757a1dbbc9294ae6de3ef"} {"level":"info","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37946","PortSpecifier":{"PortValue":37946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37946","PortSpecifier":{"PortValue":37946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785426656,"nanos":691992528},"http":{"id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","method":"POST","headers":{":authority":"maas.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4de2161c-65dd-4b60-9ad6-8511bd853042","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=931fb456-d951-44c8-a0b6-e533cabfbff4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/25f21ce6a674"]}} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/25f21ce6a674"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=931fb456-d951-44c8-a0b6-e533cabfbff4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4de2161c-65dd-4b60-9ad6-8511bd853042","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c78326f2-7885-4c73-ae89-a6dbd8108a17","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37958","PortSpecifier":{"PortValue":37958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37958","PortSpecifier":{"PortValue":37958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785426656,"nanos":749147171},"http":{"id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","method":"POST","headers":{":authority":"maas.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sfCg844L73oSw88a_mQHHI4ePB5VuNpKiKoY317sD7BLAVrLuFVLmnnASmvl"} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sfCg844L73oSw88a_mQHHI4ePB5VuNpKiKoY317sD7BLAVrLuFVLmnnASmvl\"}"} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9c86c6ba-9930-4589-9951-e94d8241ad58","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"9c86c6ba-9930-4589-9951-e94d8241ad58","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9c86c6ba-9930-4589-9951-e94d8241ad58","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T15:50:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59f6b9ad-3ad6-4667-96fe-a0a581721a71","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5"} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5"} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88027de961bfcca58500b9d4b27ed3ceea80580d3f98c72bed550b88bc44c872","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88027de961bfcca58500b9d4b27ed3ceea80580d3f98c72bed550b88bc44c872"} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88027de961bfcca58500b9d4b27ed3ceea80580d3f98c72bed550b88bc44c872","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5"} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88027de961bfcca58500b9d4b27ed3ceea80580d3f98c72bed550b88bc44c872","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88027de961bfcca58500b9d4b27ed3ceea80580d3f98c72bed550b88bc44c872"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf"} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88027de961bfcca58500b9d4b27ed3ceea80580d3f98c72bed550b88bc44c872","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88027de961bfcca58500b9d4b27ed3ceea80580d3f98c72bed550b88bc44c872"} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88027de961bfcca58500b9d4b27ed3ceea80580d3f98c72bed550b88bc44c872","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5"} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f43a16fd9a122488d01b47364f2f5a173ea4a37c33337c7e953897d8c832273","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f43a16fd9a122488d01b47364f2f5a173ea4a37c33337c7e953897d8c832273","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf"} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f43a16fd9a122488d01b47364f2f5a173ea4a37c33337c7e953897d8c832273","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88027de961bfcca58500b9d4b27ed3ceea80580d3f98c72bed550b88bc44c872"} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f43a16fd9a122488d01b47364f2f5a173ea4a37c33337c7e953897d8c832273","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f43a16fd9a122488d01b47364f2f5a173ea4a37c33337c7e953897d8c832273","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f43a16fd9a122488d01b47364f2f5a173ea4a37c33337c7e953897d8c832273"} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f43a16fd9a122488d01b47364f2f5a173ea4a37c33337c7e953897d8c832273","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f43a16fd9a122488d01b47364f2f5a173ea4a37c33337c7e953897d8c832273"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f43a16fd9a122488d01b47364f2f5a173ea4a37c33337c7e953897d8c832273","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f43a16fd9a122488d01b47364f2f5a173ea4a37c33337c7e953897d8c832273","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f43a16fd9a122488d01b47364f2f5a173ea4a37c33337c7e953897d8c832273","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5"} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf"} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f43a16fd9a122488d01b47364f2f5a173ea4a37c33337c7e953897d8c832273"} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40"} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40"} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40"} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db"} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db"} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a23f52b9162a5089f7601f42a2217f053d2181c9ad4d29b96b1db4c396e12a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a23f52b9162a5089f7601f42a2217f053d2181c9ad4d29b96b1db4c396e12a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a23f52b9162a5089f7601f42a2217f053d2181c9ad4d29b96b1db4c396e12a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a23f52b9162a5089f7601f42a2217f053d2181c9ad4d29b96b1db4c396e12a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a23f52b9162a5089f7601f42a2217f053d2181c9ad4d29b96b1db4c396e12a7"} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a23f52b9162a5089f7601f42a2217f053d2181c9ad4d29b96b1db4c396e12a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a23f52b9162a5089f7601f42a2217f053d2181c9ad4d29b96b1db4c396e12a7"} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a23f52b9162a5089f7601f42a2217f053d2181c9ad4d29b96b1db4c396e12a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a23f52b9162a5089f7601f42a2217f053d2181c9ad4d29b96b1db4c396e12a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a23f52b9162a5089f7601f42a2217f053d2181c9ad4d29b96b1db4c396e12a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a23f52b9162a5089f7601f42a2217f053d2181c9ad4d29b96b1db4c396e12a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a23f52b9162a5089f7601f42a2217f053d2181c9ad4d29b96b1db4c396e12a7"} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e9a57cc2de2a3b0060c1fde59787b6bb95582a6fd69ca27ec6ba86c28e6bb8"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e9a57cc2de2a3b0060c1fde59787b6bb95582a6fd69ca27ec6ba86c28e6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33e9a57cc2de2a3b0060c1fde59787b6bb95582a6fd69ca27ec6ba86c28e6bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e9a57cc2de2a3b0060c1fde59787b6bb95582a6fd69ca27ec6ba86c28e6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e9a57cc2de2a3b0060c1fde59787b6bb95582a6fd69ca27ec6ba86c28e6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb"} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e01cae47abe158acb9bbac2ac37234f7aa5788cdefe2790a003469d0658dca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e9a57cc2de2a3b0060c1fde59787b6bb95582a6fd69ca27ec6ba86c28e6bb8"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e01cae47abe158acb9bbac2ac37234f7aa5788cdefe2790a003469d0658dca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e01cae47abe158acb9bbac2ac37234f7aa5788cdefe2790a003469d0658dca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e01cae47abe158acb9bbac2ac37234f7aa5788cdefe2790a003469d0658dca"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e01cae47abe158acb9bbac2ac37234f7aa5788cdefe2790a003469d0658dca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e01cae47abe158acb9bbac2ac37234f7aa5788cdefe2790a003469d0658dca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e01cae47abe158acb9bbac2ac37234f7aa5788cdefe2790a003469d0658dca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e01cae47abe158acb9bbac2ac37234f7aa5788cdefe2790a003469d0658dca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e01cae47abe158acb9bbac2ac37234f7aa5788cdefe2790a003469d0658dca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb"} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e01cae47abe158acb9bbac2ac37234f7aa5788cdefe2790a003469d0658dca"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c"} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c"} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c"} {"level":"debug","ts":"2026-07-30T15:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T15:51:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T15:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T15:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T15:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c"} {"level":"info","ts":"2026-07-30T15:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29ddbf90-facf-458e-8e62-b41d6d475f84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56046","PortSpecifier":{"PortValue":56046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29ddbf90-facf-458e-8e62-b41d6d475f84","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-10fa8b.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T15:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29ddbf90-facf-458e-8e62-b41d6d475f84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56046","PortSpecifier":{"PortValue":56046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785426720,"nanos":274457871},"http":{"id":"29ddbf90-facf-458e-8e62-b41d6d475f84","method":"POST","headers":{":authority":"e2e-ipp-a-10fa8b.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:52:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"29ddbf90-facf-458e-8e62-b41d6d475f84","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-30T15:52:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29ddbf90-facf-458e-8e62-b41d6d475f84","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4de2161c-65dd-4b60-9ad6-8511bd853042","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=931fb456-d951-44c8-a0b6-e533cabfbff4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/25f21ce6a674"]}} {"level":"debug","ts":"2026-07-30T15:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29ddbf90-facf-458e-8e62-b41d6d475f84","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/25f21ce6a674"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=931fb456-d951-44c8-a0b6-e533cabfbff4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4de2161c-65dd-4b60-9ad6-8511bd853042","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-10fa8b.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29ddbf90-facf-458e-8e62-b41d6d475f84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29ddbf90-facf-458e-8e62-b41d6d475f84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29ddbf90-facf-458e-8e62-b41d6d475f84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-10fa8b/ipp-route-10fa8b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-10fa8b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29ddbf90-facf-458e-8e62-b41d6d475f84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-30T15:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29ddbf90-facf-458e-8e62-b41d6d475f84","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T15:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29ddbf90-facf-458e-8e62-b41d6d475f84","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-30T15:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29ddbf90-facf-458e-8e62-b41d6d475f84","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T15:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29ddbf90-facf-458e-8e62-b41d6d475f84","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43524","PortSpecifier":{"PortValue":43524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc516860-4576-4475-a4a9-d425dc0ded1a","method":"POST","path":"/ai-tenant-e2e-ipp-a-10fa8b/ipp-route-10fa8b/v1/chat/completions","host":"e2e-ipp-a-10fa8b.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43524","PortSpecifier":{"PortValue":43524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785426722,"nanos":340357236},"http":{"id":"cc516860-4576-4475-a4a9-d425dc0ded1a","method":"POST","headers":{":authority":"e2e-ipp-a-10fa8b.apps.c36697a2-1d34-4430-8e6a-25f21ce6a674.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-10fa8b/ipp-route-10fa8b/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10ZaksMeeIrTCPjAh_KFMfii3O7tFUBMzpRfEfCxKoNrUM6uIxKl0WNRZ9vBF"} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-10fa8b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10ZaksMeeIrTCPjAh_KFMfii3O7tFUBMzpRfEfCxKoNrUM6uIxKl0WNRZ9vBF\"}"} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-10fa8b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5781ebda-46a0-4e92-89c4-eaf27c9d63af","keyName":"e2e-ipp-10fa8b","subscription":"ipp-route-10fa8b-sub","tenant":"e2e-ipp-a-10fa8b","userId":"5781ebda-46a0-4e92-89c4-eaf27c9d63af","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-10fa8b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-10fa8b/ipp-route-10fa8b\",\"requestedSubscription\":\"ipp-route-10fa8b-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-10fa8b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-10fa8b/models/facebook/opt-125m","name":"ipp-route-10fa8b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-10fa8b-sub","namespace":"ai-tenant-e2e-ipp-a-10fa8b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-10fa8b/ipp-route-10fa8b"}} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-10fa8b/ipp-route-10fa8b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-10fa8b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-10fa8b-sub"} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5781ebda-46a0-4e92-89c4-eaf27c9d63af","keyName":"e2e-ipp-10fa8b","selected_subscription":"ipp-route-10fa8b-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-10fa8b/ipp-route-10fa8b-sub@ai-tenant-e2e-ipp-a-10fa8b/ipp-route-10fa8b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-10fa8b/models/facebook/opt-125m","name":"ipp-route-10fa8b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-10fa8b-sub","namespace":"ai-tenant-e2e-ipp-a-10fa8b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-10fa8b/ipp-route-10fa8b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T15:52:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc516860-4576-4475-a4a9-d425dc0ded1a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T15:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08e01cae47abe158acb9bbac2ac37234f7aa5788cdefe2790a003469d0658dca"} {"level":"info","ts":"2026-07-30T15:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e3b19fe115a27b38dd287ac4122bca727d6ca9a2f14ca7374301426cf65eb40"} {"level":"info","ts":"2026-07-30T15:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f43a16fd9a122488d01b47364f2f5a173ea4a37c33337c7e953897d8c832273"} {"level":"info","ts":"2026-07-30T15:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19be2adecf1e4e58c1e45ffc87a35d03dc82a151f7249ee0df7fe5c87592277c"} {"level":"info","ts":"2026-07-30T15:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e26c498fc62316d597402b12e5ffb53c1a638c68e5ae60de687f7cab9b2acbb"} {"level":"info","ts":"2026-07-30T15:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33e9a57cc2de2a3b0060c1fde59787b6bb95582a6fd69ca27ec6ba86c28e6bb8"} {"level":"info","ts":"2026-07-30T15:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88027de961bfcca58500b9d4b27ed3ceea80580d3f98c72bed550b88bc44c872"} {"level":"info","ts":"2026-07-30T15:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a23f52b9162a5089f7601f42a2217f053d2181c9ad4d29b96b1db4c396e12a7"} {"level":"info","ts":"2026-07-30T15:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81689ffd2018db5d4073cce925ed53ed7f392ca4cd2a30b5916b8d1eeecabb59"} {"level":"info","ts":"2026-07-30T15:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb0c5bbf7c243a5ce880f54ac68b9f7b276dd97020d20f7e57b1e328d452bde5"} {"level":"info","ts":"2026-07-30T15:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe723e2661994567c0d0f11222956e992ad600a51758058166cf62f2e2cb36db"} {"level":"info","ts":"2026-07-30T15:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40efd628fe8be068b8090238003fa9bd1dcaeaf5b9e6c54a859ab2caed32afbf"}