{"level":"info","ts":"2026-07-21T22:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/359dbd3c98cfc7aa45683625cd052db66b1bafa55d2824f5457db994c25d5bd1"}
{"level":"info","ts":"2026-07-21T22:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/765bcc35d1443c622d38e4fc2cb587c15dcac7577b1d07606fc396d7f40c3dfc"}
{"level":"info","ts":"2026-07-21T22:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3e001520d6e83919571e884173280f95486c690189f789ec366c4cbcbbd7e56"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bd30c177f1b98ec05fa9ee21c45c1afc39a01b3a9ee4d27381f492da2f575a3"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f8983ad51eed3858c694e44c5deb2595d5f8869d2794401db448dde22004184"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3525b2839e03fcb76ef2d4a91998c5fcd64c28b95bc1a48cf090cbf8d2ef8b68"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1889746f9ba8feb80bad71431b2aa1f40d5125776d76b387e800e1cd9a511b76"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df6589aadefdaeef4ad5fa6977dd1558f3ff7093871191f1850710464dfe7905"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f385ba3930f6e4be86bf63bd47405ada223f0a2e84ed843416b11fde39cda0ef"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04aafe1bd6d7fad3a1cf7bf6bf1fbe03d171d08674374d1c19cc7981bafb7c0b"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01502fd8d4f80bc4e1ada470f39c73c1dacf296d1438c0ae4453c0c113e7c984"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/663b2726374d5e2d8b6690ba9a306cba0fac8bbe2f535107a6ec7c72fb69decc"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaf2ca3808f21539092ab2d19c8faf32d47c6eeec2221e72a580ff6e316c0be8"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:32:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"error","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"}
{"level":"error","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"error","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"error","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T22:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd"}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T22:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47024","PortSpecifier":{"PortValue":47024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47024","PortSpecifier":{"PortValue":47024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673223,"nanos":885065834},"http":{"id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ad12dbb-0f24-4389-a1f8-ca417bb4405a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54816","PortSpecifier":{"PortValue":54816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54816","PortSpecifier":{"PortValue":54816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673223,"nanos":930211678},"http":{"id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0554cb53-0dcc-4fdb-a133-b7c628e9b1b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47038","PortSpecifier":{"PortValue":47038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5dd23c39-76bf-4313-8525-131f885d4ea6","method":"POST","path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47038","PortSpecifier":{"PortValue":47038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673223,"nanos":970333584},"http":{"id":"5dd23c39-76bf-4313-8525-131f885d4ea6","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kPUSayGgFrR1oYcE_nII7YuPPqgRHyCwatdWa7gmKrc8opE9j3gIex1W270J"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kPUSayGgFrR1oYcE_nII7YuPPqgRHyCwatdWa7gmKrc8opE9j3gIex1W270J\"}"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","keyName":"e2e-rate-a-d0a9d2","subscription":"e2e-rate-iso-a-d0a9d2","tenant":"e2e-shared-a-131f31","userId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\",\"requestedSubscription\":\"e2e-rate-iso-a-d0a9d2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0a9d2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0a9d2"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","keyName":"e2e-rate-a-d0a9d2","selected_subscription":"e2e-rate-iso-a-d0a9d2","selected_subscription_key":"ai-tenant-e2e-shared-a-131f31/e2e-rate-iso-a-d0a9d2@ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0a9d2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5dd23c39-76bf-4313-8525-131f885d4ea6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47054","PortSpecifier":{"PortValue":47054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35799d1e-1deb-49f6-bb74-51df32fafad0","method":"POST","path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47054","PortSpecifier":{"PortValue":47054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673225,"nanos":24943829},"http":{"id":"35799d1e-1deb-49f6-bb74-51df32fafad0","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kPUSayGgFrR1oYcE_nII7YuPPqgRHyCwatdWa7gmKrc8opE9j3gIex1W270J"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kPUSayGgFrR1oYcE_nII7YuPPqgRHyCwatdWa7gmKrc8opE9j3gIex1W270J\"}"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","keyName":"e2e-rate-a-d0a9d2","subscription":"e2e-rate-iso-a-d0a9d2","tenant":"e2e-shared-a-131f31","userId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\",\"requestedSubscription\":\"e2e-rate-iso-a-d0a9d2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0a9d2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0a9d2"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","keyName":"e2e-rate-a-d0a9d2","selected_subscription":"e2e-rate-iso-a-d0a9d2","selected_subscription_key":"ai-tenant-e2e-shared-a-131f31/e2e-rate-iso-a-d0a9d2@ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0a9d2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35799d1e-1deb-49f6-bb74-51df32fafad0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e0b999a-d096-420d-a957-5407e923b907","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47070","PortSpecifier":{"PortValue":47070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e0b999a-d096-420d-a957-5407e923b907","method":"POST","path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e0b999a-d096-420d-a957-5407e923b907","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47070","PortSpecifier":{"PortValue":47070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673226,"nanos":61683639},"http":{"id":"0e0b999a-d096-420d-a957-5407e923b907","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kPUSayGgFrR1oYcE_nII7YuPPqgRHyCwatdWa7gmKrc8opE9j3gIex1W270J"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kPUSayGgFrR1oYcE_nII7YuPPqgRHyCwatdWa7gmKrc8opE9j3gIex1W270J\"}"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","keyName":"e2e-rate-a-d0a9d2","subscription":"e2e-rate-iso-a-d0a9d2","tenant":"e2e-shared-a-131f31","userId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\",\"requestedSubscription\":\"e2e-rate-iso-a-d0a9d2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0a9d2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e0b999a-d096-420d-a957-5407e923b907","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0a9d2"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e0b999a-d096-420d-a957-5407e923b907","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4ba9e4c-a399-4f13-ae7c-82c48de781b3","keyName":"e2e-rate-a-d0a9d2","selected_subscription":"e2e-rate-iso-a-d0a9d2","selected_subscription_key":"ai-tenant-e2e-shared-a-131f31/e2e-rate-iso-a-d0a9d2@ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0a9d2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e0b999a-d096-420d-a957-5407e923b907","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e0b999a-d096-420d-a957-5407e923b907","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53852","PortSpecifier":{"PortValue":53852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53852","PortSpecifier":{"PortValue":53852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673239,"nanos":1926148},"http":{"id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c868d5c-e7a5-4801-b484-668f3d46f41b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50474","PortSpecifier":{"PortValue":50474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50474","PortSpecifier":{"PortValue":50474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673239,"nanos":43076220},"http":{"id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"]}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/06013d50a697"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=74e4572c-9387-43a7-bcae-8e777a94f0d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"376e03fb-a21c-4ef9-ab7f-c91a488747f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b046cc9a-68f6-4a55-9e73-12cd36bda990","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53868","PortSpecifier":{"PortValue":53868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f79464ab-d67c-4619-99ca-4c29f0153cba","method":"POST","path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53868","PortSpecifier":{"PortValue":53868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673239,"nanos":81565576},"http":{"id":"f79464ab-d67c-4619-99ca-4c29f0153cba","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KfP0PKro0IgaqXVq_1eAIa7VcHAGiT6bFiAFRqEwc8qisbooNdAxG4g6RNBO"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KfP0PKro0IgaqXVq_1eAIa7VcHAGiT6bFiAFRqEwc8qisbooNdAxG4g6RNBO\"}"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4703bb9a-ca0e-4de7-9277-59252c30c672","keyName":"e2e-rate-a-ecbcd2","subscription":"e2e-rate-iso-a-ecbcd2","tenant":"e2e-shared-a-131f31","userId":"4703bb9a-ca0e-4de7-9277-59252c30c672","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\",\"requestedSubscription\":\"e2e-rate-iso-a-ecbcd2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecbcd2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ecbcd2"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4703bb9a-ca0e-4de7-9277-59252c30c672","keyName":"e2e-rate-a-ecbcd2","selected_subscription":"e2e-rate-iso-a-ecbcd2","selected_subscription_key":"ai-tenant-e2e-shared-a-131f31/e2e-rate-iso-a-ecbcd2@ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecbcd2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:33:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f79464ab-d67c-4619-99ca-4c29f0153cba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62a58ca3-a542-4292-b578-ac95440a188d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53878","PortSpecifier":{"PortValue":53878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62a58ca3-a542-4292-b578-ac95440a188d","method":"POST","path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62a58ca3-a542-4292-b578-ac95440a188d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53878","PortSpecifier":{"PortValue":53878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673240,"nanos":122833334},"http":{"id":"62a58ca3-a542-4292-b578-ac95440a188d","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KfP0PKro0IgaqXVq_1eAIa7VcHAGiT6bFiAFRqEwc8qisbooNdAxG4g6RNBO"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KfP0PKro0IgaqXVq_1eAIa7VcHAGiT6bFiAFRqEwc8qisbooNdAxG4g6RNBO\"}"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4703bb9a-ca0e-4de7-9277-59252c30c672","keyName":"e2e-rate-a-ecbcd2","subscription":"e2e-rate-iso-a-ecbcd2","tenant":"e2e-shared-a-131f31","userId":"4703bb9a-ca0e-4de7-9277-59252c30c672","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\",\"requestedSubscription\":\"e2e-rate-iso-a-ecbcd2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecbcd2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62a58ca3-a542-4292-b578-ac95440a188d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ecbcd2"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a58ca3-a542-4292-b578-ac95440a188d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4703bb9a-ca0e-4de7-9277-59252c30c672","keyName":"e2e-rate-a-ecbcd2","selected_subscription":"e2e-rate-iso-a-ecbcd2","selected_subscription_key":"ai-tenant-e2e-shared-a-131f31/e2e-rate-iso-a-ecbcd2@ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecbcd2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62a58ca3-a542-4292-b578-ac95440a188d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:34:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62a58ca3-a542-4292-b578-ac95440a188d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53892","PortSpecifier":{"PortValue":53892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","method":"POST","path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions","host":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53892","PortSpecifier":{"PortValue":53892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673241,"nanos":160573976},"http":{"id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","method":"POST","headers":{":authority":"e2e-shared-a-131f31.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KfP0PKro0IgaqXVq_1eAIa7VcHAGiT6bFiAFRqEwc8qisbooNdAxG4g6RNBO"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KfP0PKro0IgaqXVq_1eAIa7VcHAGiT6bFiAFRqEwc8qisbooNdAxG4g6RNBO\"}"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4703bb9a-ca0e-4de7-9277-59252c30c672","keyName":"e2e-rate-a-ecbcd2","subscription":"e2e-rate-iso-a-ecbcd2","tenant":"e2e-shared-a-131f31","userId":"4703bb9a-ca0e-4de7-9277-59252c30c672","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\",\"requestedSubscription\":\"e2e-rate-iso-a-ecbcd2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-131f31.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecbcd2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-131f31/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ecbcd2"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4703bb9a-ca0e-4de7-9277-59252c30c672","keyName":"e2e-rate-a-ecbcd2","selected_subscription":"e2e-rate-iso-a-ecbcd2","selected_subscription_key":"ai-tenant-e2e-shared-a-131f31/e2e-rate-iso-a-ecbcd2@ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-131f31","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecbcd2","namespace":"ai-tenant-e2e-shared-a-131f31","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-131f31/rate-test-model-131f31"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04cdd2c9-464b-4bb2-81c1-f730de29c2a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50484","PortSpecifier":{"PortValue":50484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","method":"POST","path":"/ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603/v1/completions","host":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50484","PortSpecifier":{"PortValue":50484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784673241,"nanos":202612361},"http":{"id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","method":"POST","headers":{":authority":"e2e-shared-b-b77603.apps.ee76ad30-5f82-4f62-9bd0-06013d50a697.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WgGm0e3OFmPIkjj9_5vO2DFNAXdxlOwyaq4ZziNh4IvBu8sugSifWGgD9BcN"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WgGm0e3OFmPIkjj9_5vO2DFNAXdxlOwyaq4ZziNh4IvBu8sugSifWGgD9BcN\"}"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b166feb8-1a5f-458c-befc-34cf6b23b03f","keyName":"e2e-rate-b-ecbcd2","subscription":"e2e-rate-iso-b-ecbcd2","tenant":"e2e-shared-b-b77603","userId":"b166feb8-1a5f-458c-befc-34cf6b23b03f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603\",\"requestedSubscription\":\"e2e-rate-iso-b-ecbcd2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b77603.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b77603","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ecbcd2","namespace":"ai-tenant-e2e-shared-b-b77603","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603"}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b77603/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ecbcd2"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b166feb8-1a5f-458c-befc-34cf6b23b03f","keyName":"e2e-rate-b-ecbcd2","selected_subscription":"e2e-rate-iso-b-ecbcd2","selected_subscription_key":"ai-tenant-e2e-shared-b-b77603/e2e-rate-iso-b-ecbcd2@ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b77603","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ecbcd2","namespace":"ai-tenant-e2e-shared-b-b77603","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b77603/rate-test-model-b77603"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T22:34:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"677514ee-d2ef-4d38-b3c0-7eda113414c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T22:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ea313b8c0eeebc6bbd465cbea3b744bc1dc9abd6663b6141a2618e6b01072e6"}
{"level":"info","ts":"2026-07-21T22:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45c7d0ad59f578816a412b62f5597212ab6ab1aa14f9b5c8dcb81addf05f879f"}
{"level":"info","ts":"2026-07-21T22:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e2bfddce08246ea0369a8514f670c9544368d52b5d774957dcbf97736aadeeb"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bc24d69bb2426dc050a016161601e63a97b0f06cedce11748ec19f314906008"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f1c0f9571fc4ba714d44b1df3a7c21410232bc0683ba2521646d74cf91ef40c"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c653f2dec3888bace2224054dc02a071d8c88accf02053e4dd42425daa8bd8a"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8a1ca3f040abe8f8f8209623731650a18496f0513e961cf979224e413dda832"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0a6934a18d8c4325c23b953ca4c3780cdfaba53f95ab5495bf2ea04feb13ff7"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/121a252105e4a3ee56f1d7d56cfdf1e73ef98fa0ab4cf27df75085d41eb294ca"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18d44b7fabceb7ffd2e8d1f95ed3c06b646e05e6975da7777e15700fadb449d7"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab6db16d8103a57ccac85a632faea0d15fb9ca78252e930f94bfd62062081799"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16f0c249d16d27f7d56ac47233d05ab41b9067b47945ffdef0e9ad0973645473"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/791345d762514f5266d248d17ad92462fcab8e0787aaa3c45ff7a4724de46aa0"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84fd29103f32250f044527ee5796fe49a8cd5b367f4589d79714ac7b20103318"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e231e6be177c5d733b99e6cd57639bd289e1c1f39f7e84bf29e0b71582a4d50b"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26005cf7309d6033c7b14b4ed61423b03597c3c7fcf153b345739e011f77bffd"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcd6f39e3ea01a901c5dd3272c4263858799f29abb416c644437e434de3688e7"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7912efa1183bebde1eda6bb86e22b34006512f41b1ddbcd044f693d5bd9256b3"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/698e736fd093c8b759d954f1cf39f8bddb7caad36222b2fe74d1b5ec5d210bed"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acb0feda2860628e01e3945a3e638290d4abaeaadd0b729fa56be38f8b8866f9"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/756e2f093b6ff9287ab9e3729d44e1bb6168d79e53e04d9a42f2b9aa23f52386"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6a64c654240da744b5089a1f822a6f8c0b0f0161cc532470b9593ed9138295"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6edcb2bbf70f8bbe8eb02fa252faea26da6b285b40b3c5f8ab3cbdd333d2c1f1"}
{"level":"info","ts":"2026-07-21T22:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c9371852b0b7ea0b35291926a34f977f5449b7077835ab83f1fca27433c74ba"}