{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"debug","ts":"2026-07-02T23:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747"}
{"level":"error","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af"}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"debug","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"error","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"debug","ts":"2026-07-02T23:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T23:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398"}
{"level":"info","ts":"2026-07-02T23:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"info","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56008","PortSpecifier":{"PortValue":56008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56008","PortSpecifier":{"PortValue":56008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036118,"nanos":705339207},"http":{"id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"652c8b9a-0d03-40d8-84a0-35fa15f6a4eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38812","PortSpecifier":{"PortValue":38812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0626c6f7-a61a-4270-b3d9-e81935098799","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38812","PortSpecifier":{"PortValue":38812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036118,"nanos":750518001},"http":{"id":"0626c6f7-a61a-4270-b3d9-e81935098799","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0626c6f7-a61a-4270-b3d9-e81935098799","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56022","PortSpecifier":{"PortValue":56022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a7004a4-6ad2-4618-85e2-3d1038517220","method":"POST","path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56022","PortSpecifier":{"PortValue":56022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036118,"nanos":819312022},"http":{"id":"0a7004a4-6ad2-4618-85e2-3d1038517220","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PcDmlZhrrdVOaFvW_GXpGQ19bea5x5hnfdFshNbocti4jLivTwVP29DZbKOP"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PcDmlZhrrdVOaFvW_GXpGQ19bea5x5hnfdFshNbocti4jLivTwVP29DZbKOP\"}"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","keyName":"e2e-rate-a-813823","subscription":"e2e-rate-iso-a-813823","tenant":"e2e-shared-a-9d43a8","userId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\",\"requestedSubscription\":\"e2e-rate-iso-a-813823\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-813823","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-813823"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","keyName":"e2e-rate-a-813823","selected_subscription":"e2e-rate-iso-a-813823","selected_subscription_key":"ai-tenant-e2e-shared-a-9d43a8/e2e-rate-iso-a-813823@ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-813823","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a7004a4-6ad2-4618-85e2-3d1038517220","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56034","PortSpecifier":{"PortValue":56034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","method":"POST","path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56034","PortSpecifier":{"PortValue":56034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036119,"nanos":878754424},"http":{"id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PcDmlZhrrdVOaFvW_GXpGQ19bea5x5hnfdFshNbocti4jLivTwVP29DZbKOP"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PcDmlZhrrdVOaFvW_GXpGQ19bea5x5hnfdFshNbocti4jLivTwVP29DZbKOP\"}"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","keyName":"e2e-rate-a-813823","subscription":"e2e-rate-iso-a-813823","tenant":"e2e-shared-a-9d43a8","userId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\",\"requestedSubscription\":\"e2e-rate-iso-a-813823\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-813823","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-813823"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","keyName":"e2e-rate-a-813823","selected_subscription":"e2e-rate-iso-a-813823","selected_subscription_key":"ai-tenant-e2e-shared-a-9d43a8/e2e-rate-iso-a-813823@ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-813823","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f4fe2b0-cacc-4438-bc5d-8cdb460a0a6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46242","PortSpecifier":{"PortValue":46242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","method":"POST","path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46242","PortSpecifier":{"PortValue":46242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036120,"nanos":920959071},"http":{"id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PcDmlZhrrdVOaFvW_GXpGQ19bea5x5hnfdFshNbocti4jLivTwVP29DZbKOP"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PcDmlZhrrdVOaFvW_GXpGQ19bea5x5hnfdFshNbocti4jLivTwVP29DZbKOP\"}"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","keyName":"e2e-rate-a-813823","subscription":"e2e-rate-iso-a-813823","tenant":"e2e-shared-a-9d43a8","userId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\",\"requestedSubscription\":\"e2e-rate-iso-a-813823\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-813823","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-813823"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"13465dd3-5d51-4e2f-a248-9e58804e64f2","keyName":"e2e-rate-a-813823","selected_subscription":"e2e-rate-iso-a-813823","selected_subscription_key":"ai-tenant-e2e-shared-a-9d43a8/e2e-rate-iso-a-813823@ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-813823","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"149c3cb1-e4f4-4e15-afad-c4e58a18f9a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36134","PortSpecifier":{"PortValue":36134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36134","PortSpecifier":{"PortValue":36134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036131,"nanos":697103807},"http":{"id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d86db8e4-5ba6-48cf-92da-b34ed4e5652a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53508","PortSpecifier":{"PortValue":53508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e283af40-1934-4d0c-8390-45fc91565cfb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53508","PortSpecifier":{"PortValue":53508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036131,"nanos":739287899},"http":{"id":"e283af40-1934-4d0c-8390-45fc91565cfb","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"]}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/419edc65d08e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=99e5182c-b171-4a85-b32b-3426057b8e9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6a76101a-c5f4-461a-9397-0d522edfd7ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"reason":"context canceled"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e283af40-1934-4d0c-8390-45fc91565cfb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36144","PortSpecifier":{"PortValue":36144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","method":"POST","path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36144","PortSpecifier":{"PortValue":36144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036131,"nanos":778930607},"http":{"id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GBjv68Gqxi0Q69Et_gMWTvBbuGmNfrsyEri3ERrN1lp6aHojt7VRMTZx7man"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GBjv68Gqxi0Q69Et_gMWTvBbuGmNfrsyEri3ERrN1lp6aHojt7VRMTZx7man\"}"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","keyName":"e2e-rate-a-0610ab","subscription":"e2e-rate-iso-a-0610ab","tenant":"e2e-shared-a-9d43a8","userId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\",\"requestedSubscription\":\"e2e-rate-iso-a-0610ab\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0610ab","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0610ab"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","keyName":"e2e-rate-a-0610ab","selected_subscription":"e2e-rate-iso-a-0610ab","selected_subscription_key":"ai-tenant-e2e-shared-a-9d43a8/e2e-rate-iso-a-0610ab@ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0610ab","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75ab8d1e-f5a1-4243-a7f3-2ed7568d29db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36150","PortSpecifier":{"PortValue":36150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"320b3079-e186-40f7-8a4a-d926b41e5581","method":"POST","path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36150","PortSpecifier":{"PortValue":36150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036132,"nanos":824533746},"http":{"id":"320b3079-e186-40f7-8a4a-d926b41e5581","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GBjv68Gqxi0Q69Et_gMWTvBbuGmNfrsyEri3ERrN1lp6aHojt7VRMTZx7man"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GBjv68Gqxi0Q69Et_gMWTvBbuGmNfrsyEri3ERrN1lp6aHojt7VRMTZx7man\"}"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","keyName":"e2e-rate-a-0610ab","subscription":"e2e-rate-iso-a-0610ab","tenant":"e2e-shared-a-9d43a8","userId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\",\"requestedSubscription\":\"e2e-rate-iso-a-0610ab\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0610ab","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0610ab"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","keyName":"e2e-rate-a-0610ab","selected_subscription":"e2e-rate-iso-a-0610ab","selected_subscription_key":"ai-tenant-e2e-shared-a-9d43a8/e2e-rate-iso-a-0610ab@ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0610ab","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"320b3079-e186-40f7-8a4a-d926b41e5581","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36160","PortSpecifier":{"PortValue":36160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","method":"POST","path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions","host":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36160","PortSpecifier":{"PortValue":36160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036133,"nanos":863707566},"http":{"id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","method":"POST","headers":{":authority":"e2e-shared-a-9d43a8.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GBjv68Gqxi0Q69Et_gMWTvBbuGmNfrsyEri3ERrN1lp6aHojt7VRMTZx7man"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GBjv68Gqxi0Q69Et_gMWTvBbuGmNfrsyEri3ERrN1lp6aHojt7VRMTZx7man\"}"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","keyName":"e2e-rate-a-0610ab","subscription":"e2e-rate-iso-a-0610ab","tenant":"e2e-shared-a-9d43a8","userId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\",\"requestedSubscription\":\"e2e-rate-iso-a-0610ab\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d43a8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0610ab","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0610ab"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bd5b78a-cc64-43bd-a2c6-3323c05643eb","keyName":"e2e-rate-a-0610ab","selected_subscription":"e2e-rate-iso-a-0610ab","selected_subscription_key":"ai-tenant-e2e-shared-a-9d43a8/e2e-rate-iso-a-0610ab@ai-tenant-e2e-shared-a-9d43a8/rate-test-model-9d43a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d43a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0610ab","namespace":"ai-tenant-e2e-shared-a-9d43a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f8ea52e-7f08-4fe0-869b-7191d2867648","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53518","PortSpecifier":{"PortValue":53518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","method":"POST","path":"/ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282/v1/completions","host":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53518","PortSpecifier":{"PortValue":53518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783036133,"nanos":898487528},"http":{"id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","method":"POST","headers":{":authority":"e2e-shared-b-fcd282.apps.6cee68cb-e641-499b-9830-419edc65d08e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8ZlJJLIYZOWFbOcL_HeZpmPC69fnjNnayFH4JLqbfklZA8oxk7TnaOqpahZo"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8ZlJJLIYZOWFbOcL_HeZpmPC69fnjNnayFH4JLqbfklZA8oxk7TnaOqpahZo\"}"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d146ff1f-2bdf-4534-bfc2-6193e553dabc","keyName":"e2e-rate-b-0610ab","subscription":"e2e-rate-iso-b-0610ab","tenant":"e2e-shared-b-fcd282","userId":"d146ff1f-2bdf-4534-bfc2-6193e553dabc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282\",\"requestedSubscription\":\"e2e-rate-iso-b-0610ab\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fcd282.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fcd282","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0610ab","namespace":"ai-tenant-e2e-shared-b-fcd282","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-0610ab"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d146ff1f-2bdf-4534-bfc2-6193e553dabc","keyName":"e2e-rate-b-0610ab","selected_subscription":"e2e-rate-iso-b-0610ab","selected_subscription_key":"ai-tenant-e2e-shared-b-fcd282/e2e-rate-iso-b-0610ab@ai-tenant-e2e-shared-b-fcd282/rate-test-model-fcd282","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fcd282","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0610ab","namespace":"ai-tenant-e2e-shared-b-fcd282","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T23:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee549de9-b04b-4d31-afba-d6a7ecb73cf8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45df88a207cfccdc271dbc2c10c0e55eb21e0a985aa77b45d30eb59d2a279299"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/899b073252837d04f077e3d08b390222c8519025f99dc27ec5f2ea4703cc476c"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f13521bb351c52f9233a355f716d528bdc70ba2cffaefe2bf1035d9e0f8fc06d"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80c249ae0c49a0778a0a4d4231d42b92595e8bf500ec61ed81a45e43b3ecf806"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1decf3093ae5c3e61376dab312b486b8f34b240a95a1f64904f07531938ec06"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47521c3bd98c8d37ece49dd11615a8f199d3a75c70705ac3789f507212a1a4cb"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e51327a8a199be15547e386b45df2e9b6506a9a4e1c728d11d05ae726befa7b5"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97207784b14863716899c72c14b2edab5eb7ba769a87d43e13ec4b8a00c57398"}
{"level":"info","ts":"2026-07-02T23:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4f0c95cc441b484346ab8cee68268b07fd6e19ead101a3459e7e7f7ade07016"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50044e072cc2b179ffce0c965c49c34d3d57e61af3fff7ee441bd3f25c1f02d8"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/672a36c4c53ed17af3a3a74e2d0a2aed7adb5f0faf04530a1f703a2d8eab8747"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c63ef2c86d6b0640dd40c00b0ee93ee19c92865c20a6c3d4f21c08ce2bdc907b"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60dc81847b7e22fbc32f7096835c4273215f7133349314bdc931f94bf3c31bbe"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fbc64705cbd601fb6582e8ddf46a8af61cfec6f2f586bc50637827bc121a417"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d842678a85fb5785c92618a10f72cff114794b190b19e2814bc2a0a53cd1a1c"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/123762cd2154dd67bb8e35c050e0a2d43c2134db9380aaa1ce5c9ae14b304315"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80f08fd6c4a912d653262226f6aa8ae8aa015acb1a88c516ae79f98143e2b0af"}
{"level":"info","ts":"2026-07-02T23:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/396ada6fe69f7c06a729b7864e9c792ff4e5c5972143dfb0881bad83a8aaf10f"}
{"level":"info","ts":"2026-07-02T23:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/093f10d955933010b785cffb822a31d9028ce5c91d55043e8a658fb504d899b8"}
{"level":"info","ts":"2026-07-02T23:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d80f47379b8f31d3e4ce53e8b73e58194a58b9a45a4f06f94376e78710249529"}