{"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200"} {"level":"debug","ts":"2026-07-14T18:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200"} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08"} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"debug","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:53:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"} {"level":"debug","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"} {"level":"info","ts":"2026-07-14T18:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574"} {"level":"info","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56630","PortSpecifier":{"PortValue":56630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcb64029-d416-4ca8-867a-24f177ad3864","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56630","PortSpecifier":{"PortValue":56630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055235,"nanos":739992679},"http":{"id":"bcb64029-d416-4ca8-867a-24f177ad3864","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcb64029-d416-4ca8-867a-24f177ad3864","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58746","PortSpecifier":{"PortValue":58746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58746","PortSpecifier":{"PortValue":58746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055235,"nanos":784051638},"http":{"id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"327df4cf-6a2d-4faa-acdf-68d2c73a5942","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56636","PortSpecifier":{"PortValue":56636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","method":"POST","path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56636","PortSpecifier":{"PortValue":56636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055235,"nanos":826422407},"http":{"id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pqmm1yoQjA9kAjJu_ItoaY9PDnYG4nwdxb9UYl7o7DiYVGwIfWPa6nEFE5tp"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pqmm1yoQjA9kAjJu_ItoaY9PDnYG4nwdxb9UYl7o7DiYVGwIfWPa6nEFE5tp\"}"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8078493-fea7-471e-893c-ee2738a7920b","keyName":"e2e-rate-a-722cfe","subscription":"e2e-rate-iso-a-722cfe","tenant":"e2e-shared-a-5bb958","userId":"f8078493-fea7-471e-893c-ee2738a7920b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\",\"requestedSubscription\":\"e2e-rate-iso-a-722cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-722cfe","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-722cfe"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f8078493-fea7-471e-893c-ee2738a7920b","keyName":"e2e-rate-a-722cfe","selected_subscription":"e2e-rate-iso-a-722cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-5bb958/e2e-rate-iso-a-722cfe@ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-722cfe","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:53:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff1ccf32-469b-4f97-b649-0e731bd3d8b7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56652","PortSpecifier":{"PortValue":56652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b367a017-63b0-4631-ac81-82dec48bd7ae","method":"POST","path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56652","PortSpecifier":{"PortValue":56652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055236,"nanos":919355365},"http":{"id":"b367a017-63b0-4631-ac81-82dec48bd7ae","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pqmm1yoQjA9kAjJu_ItoaY9PDnYG4nwdxb9UYl7o7DiYVGwIfWPa6nEFE5tp"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pqmm1yoQjA9kAjJu_ItoaY9PDnYG4nwdxb9UYl7o7DiYVGwIfWPa6nEFE5tp\"}"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8078493-fea7-471e-893c-ee2738a7920b","keyName":"e2e-rate-a-722cfe","subscription":"e2e-rate-iso-a-722cfe","tenant":"e2e-shared-a-5bb958","userId":"f8078493-fea7-471e-893c-ee2738a7920b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\",\"requestedSubscription\":\"e2e-rate-iso-a-722cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-722cfe","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-722cfe"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f8078493-fea7-471e-893c-ee2738a7920b","keyName":"e2e-rate-a-722cfe","selected_subscription":"e2e-rate-iso-a-722cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-5bb958/e2e-rate-iso-a-722cfe@ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-722cfe","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:53:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b367a017-63b0-4631-ac81-82dec48bd7ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56660","PortSpecifier":{"PortValue":56660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b773c7a-25c0-9c07-9703-4062a8fef533","method":"POST","path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56660","PortSpecifier":{"PortValue":56660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055237,"nanos":966254385},"http":{"id":"3b773c7a-25c0-9c07-9703-4062a8fef533","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pqmm1yoQjA9kAjJu_ItoaY9PDnYG4nwdxb9UYl7o7DiYVGwIfWPa6nEFE5tp"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pqmm1yoQjA9kAjJu_ItoaY9PDnYG4nwdxb9UYl7o7DiYVGwIfWPa6nEFE5tp\"}"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8078493-fea7-471e-893c-ee2738a7920b","keyName":"e2e-rate-a-722cfe","subscription":"e2e-rate-iso-a-722cfe","tenant":"e2e-shared-a-5bb958","userId":"f8078493-fea7-471e-893c-ee2738a7920b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\",\"requestedSubscription\":\"e2e-rate-iso-a-722cfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-722cfe","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-722cfe"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f8078493-fea7-471e-893c-ee2738a7920b","keyName":"e2e-rate-a-722cfe","selected_subscription":"e2e-rate-iso-a-722cfe","selected_subscription_key":"ai-tenant-e2e-shared-a-5bb958/e2e-rate-iso-a-722cfe@ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-722cfe","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:53:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b773c7a-25c0-9c07-9703-4062a8fef533","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42848","PortSpecifier":{"PortValue":42848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb257f88-9414-4fb7-9087-0819e5ec4299","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42848","PortSpecifier":{"PortValue":42848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055251,"nanos":547040465},"http":{"id":"eb257f88-9414-4fb7-9087-0819e5ec4299","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb257f88-9414-4fb7-9087-0819e5ec4299","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59130","PortSpecifier":{"PortValue":59130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59130","PortSpecifier":{"PortValue":59130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055251,"nanos":587638664},"http":{"id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"]}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1bb3910c461c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=adcdd67d-93b0-463e-8412-06eac61b8c8f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49dbdc24-2640-4add-ba35-6d8c34bdfcec","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8880fc21-1ea6-49c1-8fcd-c33510d927d9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42854","PortSpecifier":{"PortValue":42854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","method":"POST","path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42854","PortSpecifier":{"PortValue":42854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055251,"nanos":628037444},"http":{"id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D1xG1HggNdFnHA5j_X9NR4AM5bmqcaKq4X9rAYNkmYo4gQLJwsbbg5MAg6yj"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D1xG1HggNdFnHA5j_X9NR4AM5bmqcaKq4X9rAYNkmYo4gQLJwsbbg5MAg6yj\"}"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","keyName":"e2e-rate-a-1b4028","subscription":"e2e-rate-iso-a-1b4028","tenant":"e2e-shared-a-5bb958","userId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\",\"requestedSubscription\":\"e2e-rate-iso-a-1b4028\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1b4028","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1b4028"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","keyName":"e2e-rate-a-1b4028","selected_subscription":"e2e-rate-iso-a-1b4028","selected_subscription_key":"ai-tenant-e2e-shared-a-5bb958/e2e-rate-iso-a-1b4028@ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1b4028","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:54:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b72dfecc-8b39-41fc-a681-19d87c16bb5d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50394","PortSpecifier":{"PortValue":50394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","method":"POST","path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50394","PortSpecifier":{"PortValue":50394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055252,"nanos":666754963},"http":{"id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D1xG1HggNdFnHA5j_X9NR4AM5bmqcaKq4X9rAYNkmYo4gQLJwsbbg5MAg6yj"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D1xG1HggNdFnHA5j_X9NR4AM5bmqcaKq4X9rAYNkmYo4gQLJwsbbg5MAg6yj\"}"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","keyName":"e2e-rate-a-1b4028","subscription":"e2e-rate-iso-a-1b4028","tenant":"e2e-shared-a-5bb958","userId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\",\"requestedSubscription\":\"e2e-rate-iso-a-1b4028\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1b4028","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1b4028"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","keyName":"e2e-rate-a-1b4028","selected_subscription":"e2e-rate-iso-a-1b4028","selected_subscription_key":"ai-tenant-e2e-shared-a-5bb958/e2e-rate-iso-a-1b4028@ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1b4028","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a05190b7-f6fe-9417-a9a9-f0b09262c4d8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50400","PortSpecifier":{"PortValue":50400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb27b26f-0537-42c2-8417-9b350d59cab3","method":"POST","path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions","host":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50400","PortSpecifier":{"PortValue":50400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055253,"nanos":705328779},"http":{"id":"fb27b26f-0537-42c2-8417-9b350d59cab3","method":"POST","headers":{":authority":"e2e-shared-a-5bb958.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D1xG1HggNdFnHA5j_X9NR4AM5bmqcaKq4X9rAYNkmYo4gQLJwsbbg5MAg6yj"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D1xG1HggNdFnHA5j_X9NR4AM5bmqcaKq4X9rAYNkmYo4gQLJwsbbg5MAg6yj\"}"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","keyName":"e2e-rate-a-1b4028","subscription":"e2e-rate-iso-a-1b4028","tenant":"e2e-shared-a-5bb958","userId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\",\"requestedSubscription\":\"e2e-rate-iso-a-1b4028\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5bb958.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1b4028","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5bb958/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1b4028"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60b5c6b2-94b0-466d-8691-06ebfaf029fd","keyName":"e2e-rate-a-1b4028","selected_subscription":"e2e-rate-iso-a-1b4028","selected_subscription_key":"ai-tenant-e2e-shared-a-5bb958/e2e-rate-iso-a-1b4028@ai-tenant-e2e-shared-a-5bb958/rate-test-model-5bb958","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5bb958","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1b4028","namespace":"ai-tenant-e2e-shared-a-5bb958","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb27b26f-0537-42c2-8417-9b350d59cab3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49654","PortSpecifier":{"PortValue":49654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","method":"POST","path":"/ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771/v1/completions","host":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49654","PortSpecifier":{"PortValue":49654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784055253,"nanos":743953994},"http":{"id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","method":"POST","headers":{":authority":"e2e-shared-b-41a771.apps.a3f21ad8-6d6c-4d79-af10-1bb3910c461c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tiimw5Y67MlJBF4F_UE5xjFl3GIM3Qtu0gVg0qhOIv3SByJsyJpWjsLkmiNQ"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tiimw5Y67MlJBF4F_UE5xjFl3GIM3Qtu0gVg0qhOIv3SByJsyJpWjsLkmiNQ\"}"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a87553eb-fbad-420e-b17d-e61a2502fa02","keyName":"e2e-rate-b-1b4028","subscription":"e2e-rate-iso-b-1b4028","tenant":"e2e-shared-b-41a771","userId":"a87553eb-fbad-420e-b17d-e61a2502fa02","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771\",\"requestedSubscription\":\"e2e-rate-iso-b-1b4028\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-41a771.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-41a771","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1b4028","namespace":"ai-tenant-e2e-shared-b-41a771","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-41a771/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1b4028"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a87553eb-fbad-420e-b17d-e61a2502fa02","keyName":"e2e-rate-b-1b4028","selected_subscription":"e2e-rate-iso-b-1b4028","selected_subscription_key":"ai-tenant-e2e-shared-b-41a771/e2e-rate-iso-b-1b4028@ai-tenant-e2e-shared-b-41a771/rate-test-model-41a771","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-41a771","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1b4028","namespace":"ai-tenant-e2e-shared-b-41a771","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T18:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9645ebdd-8271-4dcb-a976-9ad9fc070759","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T18:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a21ac1455242508c6aa07a960a59fcec73c4541015e07a5f9c12455469dde6dd"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42706f5ac64bf1ead3e584b9a1bf30cae43e3b78336f27f0b329bcf16724efe7"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04d1f5c653728e9a0663f9645c5b14bf07476a8f77987745769b7c5ef431ecbc"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c1af3e01d5a4ab3d655215894a109eb8cdda511469b5bd7803be81097ec5d3c"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b33dc33e5fa487bb186d1a2450b0e31452f43172aa12a6695b5c7470e084720"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c522500d6f44ba7500318cb73bfba74d2bad048fcbd61f1e6e8424e636d9c152"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdb1c5686e95b9501d953955b72068a16173f3dc40c43e80514ef085e65f1f08"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/147e51267205e01a5d97f7923d9d82bcd8ee835e3e7949df85049c148a982255"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8274ae7fe231e2b97f2c1fbd0b80245f3a174d57046e20d084b6c4fa3848e3e"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a878c70d33dc595617649ce319c8073a92f5f0a86a7d13a2d1fdc898888ae200"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37e2ae458f05eee62d4e6062360e7ed00b6d48859a423aadb1d47cc169b59574"} {"level":"info","ts":"2026-07-14T18:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2acceb12b06d9a397649b4c236ea078b2d6d556f3063468f3842b581d7813666"} {"level":"info","ts":"2026-07-14T18:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa9391f14cf6688e6977d4fc7c771880a7fc055764421a81ef1d2b372c6ac8ee"} {"level":"info","ts":"2026-07-14T18:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93a88a1975829e946afe50f859d0eb4cda96d3a63a93a9749e98f041c5300891"} {"level":"info","ts":"2026-07-14T18:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bad464beb42a27f16a25994b45936cf05173a27fe2cc91911d8e90246acba04"} {"level":"info","ts":"2026-07-14T18:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/874691ff6413f6924009c6b72e99857cfb2d654715b3b41bc8388b3b1233bdc5"} {"level":"info","ts":"2026-07-14T18:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/175cb6125885198df25086fee14e2c77f5fa88388fbb2d62d362eed35d655cf3"} {"level":"info","ts":"2026-07-14T18:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fedf9a674b2bab4b5df2b1866db941ee6827c77802a4c9d5d5a1be61cdbb6b46"} {"level":"info","ts":"2026-07-14T18:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d135e468c58c3d977823d6b4dd2d3ccb52de1f85d882677a40dc85e9d0f1a177"} {"level":"info","ts":"2026-07-14T18:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c8f05e21518227b97e7ca961f2403f3a44a418fdb77d6fe1641159e3ecbad4a"} {"level":"info","ts":"2026-07-14T18:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39efd6d8da1c21502774f44369204ddd90ecac892699c52c39e03e170f085f7a"} {"level":"info","ts":"2026-07-14T18:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a910b9f2e1303b6bd1b3d2e102f6f6357c865248a17c55c9a985cec89254692"} {"level":"info","ts":"2026-07-14T18:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2acbe48823b584b001b6f7dca7ead28fd492c8f4d66f08e1e43bbd844145aadf"} {"level":"info","ts":"2026-07-14T18:55:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04a2f4d259a9469e5f4d7dc092f073c00894e03fc0edc10f3f77c2f984cba0cb"}