{"level":"debug","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b43f3d46234e798ca57eab8382523063fdfd0c4d0d108af8bbb1e8d6b94f9777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e1afb4341c3b214ba34a00de534888f79cf09033fb4c928bd154667ea71e5"}
{"level":"debug","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013e1afb4341c3b214ba34a00de534888f79cf09033fb4c928bd154667ea71e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["013e1afb4341c3b214ba34a00de534888f79cf09033fb4c928bd154667ea71e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013e1afb4341c3b214ba34a00de534888f79cf09033fb4c928bd154667ea71e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013e1afb4341c3b214ba34a00de534888f79cf09033fb4c928bd154667ea71e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b43f3d46234e798ca57eab8382523063fdfd0c4d0d108af8bbb1e8d6b94f9777"}
{"level":"info","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e20de80c65c8d7ef4e18122a7e623cddac9e3172969b262f8bbea14df5bd087c"}
{"level":"info","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e1afb4341c3b214ba34a00de534888f79cf09033fb4c928bd154667ea71e5"}
{"level":"debug","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c"}
{"level":"info","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c"}
{"level":"info","ts":"2026-08-05T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c"}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c"}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c"}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"530f5f597f35febcb3fb5b5ace20c5209f1d4f483c4ff53e47d8fdf80fae7639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"530f5f597f35febcb3fb5b5ace20c5209f1d4f483c4ff53e47d8fdf80fae7639","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"530f5f597f35febcb3fb5b5ace20c5209f1d4f483c4ff53e47d8fdf80fae7639","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530f5f597f35febcb3fb5b5ace20c5209f1d4f483c4ff53e47d8fdf80fae7639"}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"530f5f597f35febcb3fb5b5ace20c5209f1d4f483c4ff53e47d8fdf80fae7639","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530f5f597f35febcb3fb5b5ace20c5209f1d4f483c4ff53e47d8fdf80fae7639"}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"530f5f597f35febcb3fb5b5ace20c5209f1d4f483c4ff53e47d8fdf80fae7639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["530f5f597f35febcb3fb5b5ace20c5209f1d4f483c4ff53e47d8fdf80fae7639"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"530f5f597f35febcb3fb5b5ace20c5209f1d4f483c4ff53e47d8fdf80fae7639","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"530f5f597f35febcb3fb5b5ace20c5209f1d4f483c4ff53e47d8fdf80fae7639","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530f5f597f35febcb3fb5b5ace20c5209f1d4f483c4ff53e47d8fdf80fae7639"}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96aa8ba0b64c34daef2b9cd0f05762f57090afbb3e33ad818e1c4a590d0ef15e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96aa8ba0b64c34daef2b9cd0f05762f57090afbb3e33ad818e1c4a590d0ef15e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96aa8ba0b64c34daef2b9cd0f05762f57090afbb3e33ad818e1c4a590d0ef15e"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625f25ab4e8c68900b8cff445438379a4498e201b89d64141174ba562bbabc62"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625f25ab4e8c68900b8cff445438379a4498e201b89d64141174ba562bbabc62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["625f25ab4e8c68900b8cff445438379a4498e201b89d64141174ba562bbabc62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625f25ab4e8c68900b8cff445438379a4498e201b89d64141174ba562bbabc62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625f25ab4e8c68900b8cff445438379a4498e201b89d64141174ba562bbabc62"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96aa8ba0b64c34daef2b9cd0f05762f57090afbb3e33ad818e1c4a590d0ef15e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96aa8ba0b64c34daef2b9cd0f05762f57090afbb3e33ad818e1c4a590d0ef15e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96aa8ba0b64c34daef2b9cd0f05762f57090afbb3e33ad818e1c4a590d0ef15e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96aa8ba0b64c34daef2b9cd0f05762f57090afbb3e33ad818e1c4a590d0ef15e"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625f25ab4e8c68900b8cff445438379a4498e201b89d64141174ba562bbabc62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96aa8ba0b64c34daef2b9cd0f05762f57090afbb3e33ad818e1c4a590d0ef15e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258"}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258"}
{"level":"error","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39816","PortSpecifier":{"PortValue":39816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","object":"source:{address:{socket_address:{address:\"10.133.0.11:39816\"  port_value:39816}}}  destination:{address:{socket_address:{address:\"10.133.0.44:443\"  port_value:443}}}  request:{time:{seconds:1785953611  nanos:464535213}  http:{id:\"cba16e6f-2b7c-4270-8295-c99131c6f18f\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0zZjhlMGQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTNmOGUwZC1vcGVuc2hpZnQtZGVmYXVsdC02Yjc3NGY4YjViLTU4NHBwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTNmOGUwZC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0zZjhlMGQtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.44~e2e-shared-a-3f8e0d-openshift-default-6b774f8b5b-584pp.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"cba16e6f-2b7c-4270-8295-c99131c6f18f\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"cdd76ca87b28f38e50d87c4a7a257fd8da62502946d7b70d0e7068bbef638626\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f4978c5fbbaa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d94a6cf7-bac5-4d7c-884b-0467f2fd6a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69c69639-2d14-4ea8-834c-61273d9f8048","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f4978c5fbbaa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d94a6cf7-bac5-4d7c-884b-0467f2fd6a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69c69639-2d14-4ea8-834c-61273d9f8048","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cdd76ca87b28f38e50d87c4a7a257fd8da62502946d7b70d0e7068bbef638626"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0zZjhlMGQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTNmOGUwZC1vcGVuc2hpZnQtZGVmYXVsdC02Yjc3NGY4YjViLTU4NHBwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTNmOGUwZC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0zZjhlMGQtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.44~e2e-shared-a-3f8e0d-openshift-default-6b774f8b5b-584pp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cba16e6f-2b7c-4270-8295-c99131c6f18f"},"host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":464535213,"seconds":1785953611}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":39816},"address":"10.133.0.11:39816"}}}}},"destination":{"address":"10.133.0.44:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"cdd76ca87b28f38e50d87c4a7a257fd8da62502946d7b70d0e7068bbef638626"},"headers":{":authority":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~e2e-shared-a-3f8e0d-openshift-default-6b774f8b5b-584pp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cba16e6f-2b7c-4270-8295-c99131c6f18f"},"host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":464535213,"seconds":1785953611},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:39816","port":39816}}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f8e0d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba16e6f-2b7c-4270-8295-c99131c6f18f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43172","PortSpecifier":{"PortValue":43172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","object":"source:{address:{socket_address:{address:\"10.133.0.11:43172\"  port_value:43172}}}  destination:{address:{socket_address:{address:\"10.132.0.63:443\"  port_value:443}}}  request:{time:{seconds:1785953611  nanos:500960367}  http:{id:\"2453a81d-ad8e-42b2-a3ce-98b59e0600c3\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-30613e.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.63~e2e-shared-b-30613e-openshift-default-85b8666d56-6vtm9.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"2453a81d-ad8e-42b2-a3ce-98b59e0600c3\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"013e1afb4341c3b214ba34a00de534888f79cf09033fb4c928bd154667ea71e5\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f4978c5fbbaa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d94a6cf7-bac5-4d7c-884b-0467f2fd6a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69c69639-2d14-4ea8-834c-61273d9f8048","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f4978c5fbbaa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d94a6cf7-bac5-4d7c-884b-0467f2fd6a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69c69639-2d14-4ea8-834c-61273d9f8048","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"013e1afb4341c3b214ba34a00de534888f79cf09033fb4c928bd154667ea71e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-30613e.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-b-30613e-openshift-default-85b8666d56-6vtm9.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3"},"host":"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":500960367,"seconds":1785953611}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":43172},"address":"10.133.0.11:43172"}}}}},"destination":{"address":"10.132.0.63:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"013e1afb4341c3b214ba34a00de534888f79cf09033fb4c928bd154667ea71e5"},"headers":{":authority":"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-30613e.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-b-30613e-openshift-default-85b8666d56-6vtm9.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3"},"host":"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":500960367,"seconds":1785953611},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:43172","port":43172}}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-30613e/rate-test-model-30613e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-30613e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2453a81d-ad8e-42b2-a3ce-98b59e0600c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39830","PortSpecifier":{"PortValue":39830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","method":"POST","path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions","host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","object":"source:{address:{socket_address:{address:\"10.133.0.11:39830\"  port_value:39830}}}  destination:{address:{socket_address:{address:\"10.133.0.44:443\"  port_value:443}}}  request:{time:{seconds:1785953611  nanos:539691931}  http:{id:\"0fa82c73-50e9-4843-84a1-7fc9a11dacee\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-3f8e0d-kserve-workload-svc.ai-tenant-e2e-shared-a-3f8e0d.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.44~e2e-shared-a-3f8e0d-openshift-default-6b774f8b5b-584pp.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"0fa82c73-50e9-4843-84a1-7fc9a11dacee\"}  path:\"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions\"  host:\"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"3b12abc1adf8acba30aecbd932eecceed065e1be60d50e025caa58a54fb1c90e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cy0ksCylFtvACygz_3NDjrVfqhQoWCTpAbLjM2tKHOvaAFkdNLL0uN2SqI5"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"febe92ed-2769-45b5-8302-c6d981babb4a","keyName":"e2e-rate-a-9fa79e","subscription":"e2e-rate-iso-a-9fa79e","tenant":"e2e-shared-a-3f8e0d","userId":"febe92ed-2769-45b5-8302-c6d981babb4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-3f8e0d/models/facebook/opt-125m","name":"rate-test-model-3f8e0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fa79e","namespace":"ai-tenant-e2e-shared-a-3f8e0d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d"}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-3f8e0d-kserve-workload-svc.ai-tenant-e2e-shared-a-3f8e0d.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~e2e-shared-a-3f8e0d-openshift-default-6b774f8b5b-584pp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee"},"host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","method":"POST","path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":539691931,"seconds":1785953611}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":39830},"address":"10.133.0.11:39830"}}}}},"destination":{"address":"10.133.0.44:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3b12abc1adf8acba30aecbd932eecceed065e1be60d50e025caa58a54fb1c90e"},"headers":{":authority":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-3f8e0d-kserve-workload-svc.ai-tenant-e2e-shared-a-3f8e0d.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~e2e-shared-a-3f8e0d-openshift-default-6b774f8b5b-584pp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee"},"host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","method":"POST","path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":539691931,"seconds":1785953611},"url_path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:39830","port":39830}}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f8e0d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9fa79e"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"febe92ed-2769-45b5-8302-c6d981babb4a","keyName":"e2e-rate-a-9fa79e","selected_subscription":"e2e-rate-iso-a-9fa79e","selected_subscription_key":"ai-tenant-e2e-shared-a-3f8e0d/e2e-rate-iso-a-9fa79e@ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-3f8e0d/models/facebook/opt-125m","name":"rate-test-model-3f8e0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fa79e","namespace":"ai-tenant-e2e-shared-a-3f8e0d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:13:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fa82c73-50e9-4843-84a1-7fc9a11dacee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39834","PortSpecifier":{"PortValue":39834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7367621-0db5-4ad4-85e1-bce48c267f08","method":"POST","path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions","host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","object":"source:{address:{socket_address:{address:\"10.133.0.11:39834\"  port_value:39834}}}  destination:{address:{socket_address:{address:\"10.133.0.44:443\"  port_value:443}}}  request:{time:{seconds:1785953612  nanos:576680811}  http:{id:\"b7367621-0db5-4ad4-85e1-bce48c267f08\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-3f8e0d-kserve-workload-svc.ai-tenant-e2e-shared-a-3f8e0d.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.44~e2e-shared-a-3f8e0d-openshift-default-6b774f8b5b-584pp.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"b7367621-0db5-4ad4-85e1-bce48c267f08\"}  path:\"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions\"  host:\"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"3b12abc1adf8acba30aecbd932eecceed065e1be60d50e025caa58a54fb1c90e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cy0ksCylFtvACygz_3NDjrVfqhQoWCTpAbLjM2tKHOvaAFkdNLL0uN2SqI5"}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"febe92ed-2769-45b5-8302-c6d981babb4a","keyName":"e2e-rate-a-9fa79e","subscription":"e2e-rate-iso-a-9fa79e","tenant":"e2e-shared-a-3f8e0d","userId":"febe92ed-2769-45b5-8302-c6d981babb4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-3f8e0d/models/facebook/opt-125m","name":"rate-test-model-3f8e0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fa79e","namespace":"ai-tenant-e2e-shared-a-3f8e0d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d"}}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-3f8e0d-kserve-workload-svc.ai-tenant-e2e-shared-a-3f8e0d.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~e2e-shared-a-3f8e0d-openshift-default-6b774f8b5b-584pp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"b7367621-0db5-4ad4-85e1-bce48c267f08"},"host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"b7367621-0db5-4ad4-85e1-bce48c267f08","method":"POST","path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":576680811,"seconds":1785953612}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":39834},"address":"10.133.0.11:39834"}}}}},"destination":{"address":"10.133.0.44:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3b12abc1adf8acba30aecbd932eecceed065e1be60d50e025caa58a54fb1c90e"},"headers":{":authority":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-3f8e0d-kserve-workload-svc.ai-tenant-e2e-shared-a-3f8e0d.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~e2e-shared-a-3f8e0d-openshift-default-6b774f8b5b-584pp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"b7367621-0db5-4ad4-85e1-bce48c267f08"},"host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"b7367621-0db5-4ad4-85e1-bce48c267f08","method":"POST","path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":576680811,"seconds":1785953612},"url_path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:39834","port":39834}}}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f8e0d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9fa79e"}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"febe92ed-2769-45b5-8302-c6d981babb4a","keyName":"e2e-rate-a-9fa79e","selected_subscription":"e2e-rate-iso-a-9fa79e","selected_subscription_key":"ai-tenant-e2e-shared-a-3f8e0d/e2e-rate-iso-a-9fa79e@ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-3f8e0d/models/facebook/opt-125m","name":"rate-test-model-3f8e0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fa79e","namespace":"ai-tenant-e2e-shared-a-3f8e0d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7367621-0db5-4ad4-85e1-bce48c267f08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55038","PortSpecifier":{"PortValue":55038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","method":"POST","path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions","host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","object":"source:{address:{socket_address:{address:\"10.133.0.11:55038\"  port_value:55038}}}  destination:{address:{socket_address:{address:\"10.133.0.44:443\"  port_value:443}}}  request:{time:{seconds:1785953613  nanos:627165289}  http:{id:\"531efbba-c729-4fae-a6e6-ff47106d0dd0\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-3f8e0d-kserve-workload-svc.ai-tenant-e2e-shared-a-3f8e0d.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.44~e2e-shared-a-3f8e0d-openshift-default-6b774f8b5b-584pp.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"531efbba-c729-4fae-a6e6-ff47106d0dd0\"}  path:\"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions\"  host:\"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"3b12abc1adf8acba30aecbd932eecceed065e1be60d50e025caa58a54fb1c90e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cy0ksCylFtvACygz_3NDjrVfqhQoWCTpAbLjM2tKHOvaAFkdNLL0uN2SqI5"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"febe92ed-2769-45b5-8302-c6d981babb4a","keyName":"e2e-rate-a-9fa79e","subscription":"e2e-rate-iso-a-9fa79e","tenant":"e2e-shared-a-3f8e0d","userId":"febe92ed-2769-45b5-8302-c6d981babb4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3f8e0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-3f8e0d/models/facebook/opt-125m","name":"rate-test-model-3f8e0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fa79e","namespace":"ai-tenant-e2e-shared-a-3f8e0d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d"}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-3f8e0d-kserve-workload-svc.ai-tenant-e2e-shared-a-3f8e0d.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~e2e-shared-a-3f8e0d-openshift-default-6b774f8b5b-584pp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"531efbba-c729-4fae-a6e6-ff47106d0dd0"},"host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","method":"POST","path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":627165289,"seconds":1785953613}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55038},"address":"10.133.0.11:55038"}}}}},"destination":{"address":"10.133.0.44:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3b12abc1adf8acba30aecbd932eecceed065e1be60d50e025caa58a54fb1c90e"},"headers":{":authority":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-3f8e0d-kserve-workload-svc.ai-tenant-e2e-shared-a-3f8e0d.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~e2e-shared-a-3f8e0d-openshift-default-6b774f8b5b-584pp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"531efbba-c729-4fae-a6e6-ff47106d0dd0"},"host":"e2e-shared-a-3f8e0d.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","method":"POST","path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":627165289,"seconds":1785953613},"url_path":"/ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55038","port":55038}}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3f8e0d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9fa79e"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"febe92ed-2769-45b5-8302-c6d981babb4a","keyName":"e2e-rate-a-9fa79e","selected_subscription":"e2e-rate-iso-a-9fa79e","selected_subscription_key":"ai-tenant-e2e-shared-a-3f8e0d/e2e-rate-iso-a-9fa79e@ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-3f8e0d/models/facebook/opt-125m","name":"rate-test-model-3f8e0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fa79e","namespace":"ai-tenant-e2e-shared-a-3f8e0d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-3f8e0d/rate-test-model-3f8e0d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"531efbba-c729-4fae-a6e6-ff47106d0dd0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34142","PortSpecifier":{"PortValue":34142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50035e82-773b-473d-8e32-bdf6a89419e2","method":"POST","path":"/ai-tenant-e2e-shared-b-30613e/rate-test-model-30613e/v1/completions","host":"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","object":"source:{address:{socket_address:{address:\"10.133.0.11:34142\"  port_value:34142}}}  destination:{address:{socket_address:{address:\"10.132.0.63:443\"  port_value:443}}}  request:{time:{seconds:1785953613  nanos:663433398}  http:{id:\"50035e82-773b-473d-8e32-bdf6a89419e2\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-b-30613e/rate-test-model-30613e/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-30613e-kserve-workload-svc.ai-tenant-e2e-shared-b-30613e.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.63~e2e-shared-b-30613e-openshift-default-85b8666d56-6vtm9.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"50035e82-773b-473d-8e32-bdf6a89419e2\"}  path:\"/ai-tenant-e2e-shared-b-30613e/rate-test-model-30613e/v1/completions\"  host:\"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"e20de80c65c8d7ef4e18122a7e623cddac9e3172969b262f8bbea14df5bd087c\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AaxGyhRI6P8UF0Vu_mrIgatJN3s2fTWnMfuxZtEBHamnhvDOKTYDOrH8yPtc"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-30613e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-30613e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"31559b02-6d3e-488b-9b54-2dec02f804b7","keyName":"e2e-rate-b-9fa79e","subscription":"e2e-rate-iso-b-9fa79e","tenant":"e2e-shared-b-30613e","userId":"31559b02-6d3e-488b-9b54-2dec02f804b7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-30613e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-30613e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-30613e/models/facebook/opt-125m","name":"rate-test-model-30613e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9fa79e","namespace":"ai-tenant-e2e-shared-b-30613e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-30613e/rate-test-model-30613e"}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-30613e-kserve-workload-svc.ai-tenant-e2e-shared-b-30613e.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0zMDYxM2Utb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTMwNjEzZS1vcGVuc2hpZnQtZGVmYXVsdC04NWI4NjY2ZDU2LTZ2dG05CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTMwNjEzZS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi0zMDYxM2Utb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-b-30613e-openshift-default-85b8666d56-6vtm9.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"50035e82-773b-473d-8e32-bdf6a89419e2"},"host":"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"50035e82-773b-473d-8e32-bdf6a89419e2","method":"POST","path":"/ai-tenant-e2e-shared-b-30613e/rate-test-model-30613e/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":663433398,"seconds":1785953613}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":34142},"address":"10.133.0.11:34142"}}}}},"destination":{"address":"10.132.0.63:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"e20de80c65c8d7ef4e18122a7e623cddac9e3172969b262f8bbea14df5bd087c"},"headers":{":authority":"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-30613e/rate-test-model-30613e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-30613e-kserve-workload-svc.ai-tenant-e2e-shared-b-30613e.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-b-30613e-openshift-default-85b8666d56-6vtm9.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"50035e82-773b-473d-8e32-bdf6a89419e2"},"host":"e2e-shared-b-30613e.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"50035e82-773b-473d-8e32-bdf6a89419e2","method":"POST","path":"/ai-tenant-e2e-shared-b-30613e/rate-test-model-30613e/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":663433398,"seconds":1785953613},"url_path":"/ai-tenant-e2e-shared-b-30613e/rate-test-model-30613e/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:34142","port":34142}}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-30613e/rate-test-model-30613e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-30613e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-9fa79e"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"31559b02-6d3e-488b-9b54-2dec02f804b7","keyName":"e2e-rate-b-9fa79e","selected_subscription":"e2e-rate-iso-b-9fa79e","selected_subscription_key":"ai-tenant-e2e-shared-b-30613e/e2e-rate-iso-b-9fa79e@ai-tenant-e2e-shared-b-30613e/rate-test-model-30613e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-30613e/models/facebook/opt-125m","name":"rate-test-model-30613e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9fa79e","namespace":"ai-tenant-e2e-shared-b-30613e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-30613e/rate-test-model-30613e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50035e82-773b-473d-8e32-bdf6a89419e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b43f3d46234e798ca57eab8382523063fdfd0c4d0d108af8bbb1e8d6b94f9777"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/625f25ab4e8c68900b8cff445438379a4498e201b89d64141174ba562bbabc62"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdd76ca87b28f38e50d87c4a7a257fd8da62502946d7b70d0e7068bbef638626"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eaa9e852541a0dc01e1d57c8537fe48a5a026ae8876c85f4b47c63d45602e258"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b12abc1adf8acba30aecbd932eecceed065e1be60d50e025caa58a54fb1c90e"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e75e532f944981ebdbd251ad8668c02672453b44666239f96e6e138cdacd1f77"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/530f5f597f35febcb3fb5b5ace20c5209f1d4f483c4ff53e47d8fdf80fae7639"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96f4402ddc8445060384857bfd7bc24f968c099b49626f5aa1a2d870a6ad16d6"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c08682e1b7ea8357f0360c88c4d8ea250daef8508a80ce0fd2e8475dcff08159"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9378275d577315dbc71256b2680e0b278fc2d78a473af8997caac099814f580"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8a9f15479b6c6d3f0243818375c2cfb50d3b2d07b432c26b1cadbd145037ec3"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e20de80c65c8d7ef4e18122a7e623cddac9e3172969b262f8bbea14df5bd087c"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6000172660969228a1c6b6b25cfe89718406c2632689828fa16d9de7bcfe6b63"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/032bd26f7ead57cd3eae6e8e55d574ab3d3be7503645cbc2826f0a3b8fc4c47d"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddb56f2eac10f620d02a132a4d2184596b7b0448cde9fb9bc6e6bd44a3ef3b9c"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cb96b4e8e3b44019352008b9cf60168e765334bb6a576a9f0aa4ac52d002516"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/355d948bcb3ac9eb17c465388369e2a3d06d036988b0cb34374b64b4ce99d912"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ece0cb590366d735acc246023f4c80b72db6585ffd9ae9406f476b055789bbcc"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8cd93baeb21ffdc396944ea3dcdca14e63918ad9a534ab5dc76e5ac84a615a7"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8e6fee5334a38999081a06c4f4937e54ec493630635bfcee5305d3cf5466f90"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/013e1afb4341c3b214ba34a00de534888f79cf09033fb4c928bd154667ea71e5"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/179cac8f2c71a6eb9657d1f5c113292cb5ace911da799c6b842c1c505627ede9"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d902384e4cfdcb21bd2dc709674ee7b1c76f4b9a500c24d41fe90633f8c0cb0"}
{"level":"info","ts":"2026-08-05T18:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96aa8ba0b64c34daef2b9cd0f05762f57090afbb3e33ad818e1c4a590d0ef15e"}
{"level":"info","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf117fc9-dea9-490b-856d-9a45b87dab39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53430","PortSpecifier":{"PortValue":53430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf117fc9-dea9-490b-856d-9a45b87dab39","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf117fc9-dea9-490b-856d-9a45b87dab39","object":"source:{address:{socket_address:{address:\"10.133.0.11:53430\"  port_value:53430}}}  destination:{address:{socket_address:{address:\"10.133.0.27:443\"  port_value:443}}}  request:{time:{seconds:1785953698  nanos:215156100}  http:{id:\"cf117fc9-dea9-490b-856d-9a45b87dab39\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"69\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXAybHpiCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.27~maas-default-gateway-openshift-default-78bb78ff78-p2lzb.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"cf117fc9-dea9-490b-856d-9a45b87dab39\"}  path:\"/maas-api/v1/api-keys\"  host:\"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf117fc9-dea9-490b-856d-9a45b87dab39","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf117fc9-dea9-490b-856d-9a45b87dab39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f4978c5fbbaa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d94a6cf7-bac5-4d7c-884b-0467f2fd6a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69c69639-2d14-4ea8-834c-61273d9f8048","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf117fc9-dea9-490b-856d-9a45b87dab39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f4978c5fbbaa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d94a6cf7-bac5-4d7c-884b-0467f2fd6a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69c69639-2d14-4ea8-834c-61273d9f8048","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.27~maas-default-gateway-openshift-default-78bb78ff78-p2lzb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cf117fc9-dea9-490b-856d-9a45b87dab39"},"host":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"cf117fc9-dea9-490b-856d-9a45b87dab39","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":215156100,"seconds":1785953698}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53430},"address":"10.133.0.11:53430"}}}}},"destination":{"address":"10.133.0.27:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.27~maas-default-gateway-openshift-default-78bb78ff78-p2lzb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cf117fc9-dea9-490b-856d-9a45b87dab39"},"host":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"cf117fc9-dea9-490b-856d-9a45b87dab39","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":215156100,"seconds":1785953698},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:53430","port":53430}}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf117fc9-dea9-490b-856d-9a45b87dab39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf117fc9-dea9-490b-856d-9a45b87dab39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf117fc9-dea9-490b-856d-9a45b87dab39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf117fc9-dea9-490b-856d-9a45b87dab39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf117fc9-dea9-490b-856d-9a45b87dab39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf117fc9-dea9-490b-856d-9a45b87dab39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf117fc9-dea9-490b-856d-9a45b87dab39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf117fc9-dea9-490b-856d-9a45b87dab39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53434","PortSpecifier":{"PortValue":53434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","object":"source:{address:{socket_address:{address:\"10.133.0.11:53434\"  port_value:53434}}}  destination:{address:{socket_address:{address:\"10.133.0.27:443\"  port_value:443}}}  request:{time:{seconds:1785953698  nanos:264170435}  http:{id:\"2adf46bf-be25-4fc8-9c0a-06e762aa0959\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXAybHpiCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.27~maas-default-gateway-openshift-default-78bb78ff78-p2lzb.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"2adf46bf-be25-4fc8-9c0a-06e762aa0959\"}  path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"  host:\"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5F7r3PlV8I2iqOGU_wTRlghi2s4FkIJNh8NCSSfXvPwTYaZedJiwrYQile1T"}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c2a8c646-bfee-4cce-92f8-54445ff1c5fa","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"c2a8c646-bfee-4cce-92f8-54445ff1c5fa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.27~maas-default-gateway-openshift-default-78bb78ff78-p2lzb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959"},"host":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":264170435,"seconds":1785953698}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53434},"address":"10.133.0.11:53434"}}}}},"destination":{"address":"10.133.0.27:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.27~maas-default-gateway-openshift-default-78bb78ff78-p2lzb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959"},"host":"maas.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":264170435,"seconds":1785953698},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:53434","port":53434}}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c2a8c646-bfee-4cce-92f8-54445ff1c5fa","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2adf46bf-be25-4fc8-9c0a-06e762aa0959","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8"}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8"}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8"}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8"}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f"}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f"}
{"level":"error","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f"}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"}
{"level":"error","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f"}
{"level":"info","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f1d92c1e6ca85b25265396f6e4e7dc74b6127ed204a3ee18cbfafbd42869f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f1d92c1e6ca85b25265396f6e4e7dc74b6127ed204a3ee18cbfafbd42869f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42762e9e5929723a610f6c7e672fe38f8f642c61129425ff2f384e074c09d584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42762e9e5929723a610f6c7e672fe38f8f642c61129425ff2f384e074c09d584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f1d92c1e6ca85b25265396f6e4e7dc74b6127ed204a3ee18cbfafbd42869f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f1d92c1e6ca85b25265396f6e4e7dc74b6127ed204a3ee18cbfafbd42869f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42762e9e5929723a610f6c7e672fe38f8f642c61129425ff2f384e074c09d584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f1d92c1e6ca85b25265396f6e4e7dc74b6127ed204a3ee18cbfafbd42869f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f1d92c1e6ca85b25265396f6e4e7dc74b6127ed204a3ee18cbfafbd42869f1"}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f1d92c1e6ca85b25265396f6e4e7dc74b6127ed204a3ee18cbfafbd42869f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8f1d92c1e6ca85b25265396f6e4e7dc74b6127ed204a3ee18cbfafbd42869f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42762e9e5929723a610f6c7e672fe38f8f642c61129425ff2f384e074c09d584"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f1d92c1e6ca85b25265396f6e4e7dc74b6127ed204a3ee18cbfafbd42869f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42762e9e5929723a610f6c7e672fe38f8f642c61129425ff2f384e074c09d584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42762e9e5929723a610f6c7e672fe38f8f642c61129425ff2f384e074c09d584"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42762e9e5929723a610f6c7e672fe38f8f642c61129425ff2f384e074c09d584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f1d92c1e6ca85b25265396f6e4e7dc74b6127ed204a3ee18cbfafbd42869f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42762e9e5929723a610f6c7e672fe38f8f642c61129425ff2f384e074c09d584","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f"}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f1d92c1e6ca85b25265396f6e4e7dc74b6127ed204a3ee18cbfafbd42869f1"}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42762e9e5929723a610f6c7e672fe38f8f642c61129425ff2f384e074c09d584"}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a"}
{"level":"error","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"083e9c01becd771210098ade5e2201faa004be27a2b1f1b3cde83b0c6d0894d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"083e9c01becd771210098ade5e2201faa004be27a2b1f1b3cde83b0c6d0894d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"083e9c01becd771210098ade5e2201faa004be27a2b1f1b3cde83b0c6d0894d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"083e9c01becd771210098ade5e2201faa004be27a2b1f1b3cde83b0c6d0894d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f358f0b5cdd55b2fcec157f602b626c23e11e6126ac24547aede87e3f0f9d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/083e9c01becd771210098ade5e2201faa004be27a2b1f1b3cde83b0c6d0894d1"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f358f0b5cdd55b2fcec157f602b626c23e11e6126ac24547aede87e3f0f9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f358f0b5cdd55b2fcec157f602b626c23e11e6126ac24547aede87e3f0f9d5"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0503776e7d43c793020266288dc51069877c72b15cef644e8d3bf54804742a"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/083e9c01becd771210098ade5e2201faa004be27a2b1f1b3cde83b0c6d0894d1"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0503776e7d43c793020266288dc51069877c72b15cef644e8d3bf54804742a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d0503776e7d43c793020266288dc51069877c72b15cef644e8d3bf54804742a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0503776e7d43c793020266288dc51069877c72b15cef644e8d3bf54804742a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"083e9c01becd771210098ade5e2201faa004be27a2b1f1b3cde83b0c6d0894d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["083e9c01becd771210098ade5e2201faa004be27a2b1f1b3cde83b0c6d0894d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0503776e7d43c793020266288dc51069877c72b15cef644e8d3bf54804742a"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"083e9c01becd771210098ade5e2201faa004be27a2b1f1b3cde83b0c6d0894d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f358f0b5cdd55b2fcec157f602b626c23e11e6126ac24547aede87e3f0f9d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41f358f0b5cdd55b2fcec157f602b626c23e11e6126ac24547aede87e3f0f9d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/083e9c01becd771210098ade5e2201faa004be27a2b1f1b3cde83b0c6d0894d1"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f358f0b5cdd55b2fcec157f602b626c23e11e6126ac24547aede87e3f0f9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f358f0b5cdd55b2fcec157f602b626c23e11e6126ac24547aede87e3f0f9d5"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5"}
{"level":"info","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0503776e7d43c793020266288dc51069877c72b15cef644e8d3bf54804742a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"083e9c01becd771210098ade5e2201faa004be27a2b1f1b3cde83b0c6d0894d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f358f0b5cdd55b2fcec157f602b626c23e11e6126ac24547aede87e3f0f9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86"}
{"level":"info","ts":"2026-08-05T18:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86"}
{"level":"info","ts":"2026-08-05T18:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86"}
{"level":"error","ts":"2026-08-05T18:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-05T18:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60175864-26df-4d72-9f4a-e93b65d83825","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37102","PortSpecifier":{"PortValue":37102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60175864-26df-4d72-9f4a-e93b65d83825","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60175864-26df-4d72-9f4a-e93b65d83825","object":"source:{address:{socket_address:{address:\"10.133.0.11:37102\"  port_value:37102}}}  destination:{address:{socket_address:{address:\"10.133.0.47:443\"  port_value:443}}}  request:{time:{seconds:1785953746  nanos:151681626}  http:{id:\"60175864-26df-4d72-9f4a-e93b65d83825\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-ipp-a-4babb1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.47~e2e-ipp-a-4babb1-openshift-default-58f744db54-hx679.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"60175864-26df-4d72-9f4a-e93b65d83825\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:15:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60175864-26df-4d72-9f4a-e93b65d83825","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-05T18:15:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60175864-26df-4d72-9f4a-e93b65d83825","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f4978c5fbbaa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d94a6cf7-bac5-4d7c-884b-0467f2fd6a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69c69639-2d14-4ea8-834c-61273d9f8048","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-05T18:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60175864-26df-4d72-9f4a-e93b65d83825","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f4978c5fbbaa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d94a6cf7-bac5-4d7c-884b-0467f2fd6a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"69c69639-2d14-4ea8-834c-61273d9f8048","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-4babb1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-ipp-a-4babb1-openshift-default-58f744db54-hx679.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"60175864-26df-4d72-9f4a-e93b65d83825"},"host":"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"60175864-26df-4d72-9f4a-e93b65d83825","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":151681626,"seconds":1785953746}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37102},"address":"10.133.0.11:37102"}}}}},"destination":{"address":"10.133.0.47:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8"},"headers":{":authority":"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-4babb1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS00YmFiYjEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTRiYWJiMS1vcGVuc2hpZnQtZGVmYXVsdC01OGY3NDRkYjU0LWh4Njc5CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTRiYWJiMS1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS00YmFiYjEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-ipp-a-4babb1-openshift-default-58f744db54-hx679.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"60175864-26df-4d72-9f4a-e93b65d83825"},"host":"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"60175864-26df-4d72-9f4a-e93b65d83825","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":151681626,"seconds":1785953746},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:37102","port":37102}}}
{"level":"debug","ts":"2026-08-05T18:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60175864-26df-4d72-9f4a-e93b65d83825","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60175864-26df-4d72-9f4a-e93b65d83825","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60175864-26df-4d72-9f4a-e93b65d83825","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-4babb1/ipp-route-4babb1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-4babb1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60175864-26df-4d72-9f4a-e93b65d83825","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-05T18:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60175864-26df-4d72-9f4a-e93b65d83825","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60175864-26df-4d72-9f4a-e93b65d83825","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-05T18:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60175864-26df-4d72-9f4a-e93b65d83825","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60175864-26df-4d72-9f4a-e93b65d83825","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15f0f14a-770f-493c-be8f-4375d462c701","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37104","PortSpecifier":{"PortValue":37104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15f0f14a-770f-493c-be8f-4375d462c701","method":"POST","path":"/ai-tenant-e2e-ipp-a-4babb1/ipp-route-4babb1/v1/chat/completions","host":"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15f0f14a-770f-493c-be8f-4375d462c701","object":"source:{address:{socket_address:{address:\"10.133.0.11:37104\"  port_value:37104}}}  destination:{address:{socket_address:{address:\"10.133.0.47:443\"  port_value:443}}}  request:{time:{seconds:1785953748  nanos:205726550}  http:{id:\"15f0f14a-770f-493c-be8f-4375d462c701\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-ipp-a-4babb1/ipp-route-4babb1/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"ipp-route-4babb1-kserve-workload-svc.ai-tenant-e2e-ipp-a-4babb1.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.47~e2e-ipp-a-4babb1-openshift-default-58f744db54-hx679.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"15f0f14a-770f-493c-be8f-4375d462c701\"}  path:\"/ai-tenant-e2e-ipp-a-4babb1/ipp-route-4babb1/v1/chat/completions\"  host:\"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15f0f14a-770f-493c-be8f-4375d462c701","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VrYevDc1FIQaTHSl_WfGiDgaFTnob4knjc45rzHHs8xVE2gjp1J7cwODlggH"}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15f0f14a-770f-493c-be8f-4375d462c701","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-4babb1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15f0f14a-770f-493c-be8f-4375d462c701","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-4babb1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"76737546-cd09-4e8c-871e-5e3e535bd569","keyName":"e2e-ipp-4babb1","subscription":"ipp-route-4babb1-sub","tenant":"e2e-ipp-a-4babb1","userId":"76737546-cd09-4e8c-871e-5e3e535bd569","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15f0f14a-770f-493c-be8f-4375d462c701","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-4babb1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15f0f14a-770f-493c-be8f-4375d462c701","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-4babb1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-4babb1/models/facebook/opt-125m","name":"ipp-route-4babb1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-4babb1-sub","namespace":"ai-tenant-e2e-ipp-a-4babb1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-4babb1/ipp-route-4babb1"}}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15f0f14a-770f-493c-be8f-4375d462c701","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-4babb1-kserve-workload-svc.ai-tenant-e2e-ipp-a-4babb1.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-ipp-a-4babb1-openshift-default-58f744db54-hx679.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"15f0f14a-770f-493c-be8f-4375d462c701"},"host":"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"15f0f14a-770f-493c-be8f-4375d462c701","method":"POST","path":"/ai-tenant-e2e-ipp-a-4babb1/ipp-route-4babb1/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":205726550,"seconds":1785953748}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37104},"address":"10.133.0.11:37104"}}}}},"destination":{"address":"10.133.0.47:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"},"headers":{":authority":"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-4babb1/ipp-route-4babb1/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-4babb1-kserve-workload-svc.ai-tenant-e2e-ipp-a-4babb1.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-ipp-a-4babb1-openshift-default-58f744db54-hx679.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.11","x-forwarded-host":"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"15f0f14a-770f-493c-be8f-4375d462c701"},"host":"e2e-ipp-a-4babb1.apps.19973753-dc17-49e3-83bd-f4978c5fbbaa.prod.konfluxeaas.com","id":"15f0f14a-770f-493c-be8f-4375d462c701","method":"POST","path":"/ai-tenant-e2e-ipp-a-4babb1/ipp-route-4babb1/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":205726550,"seconds":1785953748},"url_path":"/ai-tenant-e2e-ipp-a-4babb1/ipp-route-4babb1/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:37104","port":37104}}}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15f0f14a-770f-493c-be8f-4375d462c701","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15f0f14a-770f-493c-be8f-4375d462c701","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-4babb1/ipp-route-4babb1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-4babb1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15f0f14a-770f-493c-be8f-4375d462c701","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15f0f14a-770f-493c-be8f-4375d462c701","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15f0f14a-770f-493c-be8f-4375d462c701","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15f0f14a-770f-493c-be8f-4375d462c701","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-4babb1-sub"}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15f0f14a-770f-493c-be8f-4375d462c701","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15f0f14a-770f-493c-be8f-4375d462c701","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"76737546-cd09-4e8c-871e-5e3e535bd569","keyName":"e2e-ipp-4babb1","selected_subscription":"ipp-route-4babb1-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-4babb1/ipp-route-4babb1-sub@ai-tenant-e2e-ipp-a-4babb1/ipp-route-4babb1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-4babb1/models/facebook/opt-125m","name":"ipp-route-4babb1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-4babb1-sub","namespace":"ai-tenant-e2e-ipp-a-4babb1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-4babb1/ipp-route-4babb1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15f0f14a-770f-493c-be8f-4375d462c701","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:15:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15f0f14a-770f-493c-be8f-4375d462c701","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3c2fb3563822e916f9fa3d0c2d7df116f422ca246a50391f2510d4c9730426f"}
{"level":"info","ts":"2026-08-05T18:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa585dadf75b10e5f5f2f0b4897840efafe49645e126728a47c7ff1bfc011ce5"}
{"level":"info","ts":"2026-08-05T18:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b4a003f83c897dc085b94ad01a08553d02fd1e62fb5ac6f05f801e9a6e6a06a"}
{"level":"info","ts":"2026-08-05T18:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8f1d92c1e6ca85b25265396f6e4e7dc74b6127ed204a3ee18cbfafbd42869f1"}
{"level":"info","ts":"2026-08-05T18:16:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41f358f0b5cdd55b2fcec157f602b626c23e11e6126ac24547aede87e3f0f9d5"}
{"level":"info","ts":"2026-08-05T18:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87f3b2a6379d0832360efcac3509d0c26e565ff429a1e2baa906e20262d512c8"}
{"level":"info","ts":"2026-08-05T18:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/111ba81e60014d82b2d44ea3ed1f82133b4e62644fcb30f3d58fee7879f9a85c"}
{"level":"info","ts":"2026-08-05T18:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/134b1fcc3b65c80927e545d52afc303e7a39856f4bb382a01a20fd94da0d4854"}
{"level":"info","ts":"2026-08-05T18:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a32929289ea8fd61b1cce1f6cf5be00cee0a945e708ecb396535e7e6dd57a86"}
{"level":"info","ts":"2026-08-05T18:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d0503776e7d43c793020266288dc51069877c72b15cef644e8d3bf54804742a"}
{"level":"info","ts":"2026-08-05T18:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42762e9e5929723a610f6c7e672fe38f8f642c61129425ff2f384e074c09d584"}
{"level":"info","ts":"2026-08-05T18:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/083e9c01becd771210098ade5e2201faa004be27a2b1f1b3cde83b0c6d0894d1"}