{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e67e6a70-cecc-45d2-85f9-14aa18e07ed1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e67e6a70-cecc-45d2-85f9-14aa18e07ed1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e67e6a70-cecc-45d2-85f9-14aa18e07ed1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72501c/sub-test-model-72501c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e67e6a70-cecc-45d2-85f9-14aa18e07ed1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e67e6a70-cecc-45d2-85f9-14aa18e07ed1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e67e6a70-cecc-45d2-85f9-14aa18e07ed1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e67e6a70-cecc-45d2-85f9-14aa18e07ed1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e67e6a70-cecc-45d2-85f9-14aa18e07ed1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49722","PortSpecifier":{"PortValue":49722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e9ef33.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49722","PortSpecifier":{"PortValue":49722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784690542,"nanos":607664724},"http":{"id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","method":"POST","headers":{":authority":"e2e-shared-b-e9ef33.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8a9b6c3c-6962-4793-aece-1d5b773696a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0407a5c-71e6-4411-ad5a-276fa1d8d350"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9272e118374d"]}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9272e118374d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0407a5c-71e6-4411-ad5a-276fa1d8d350"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8a9b6c3c-6962-4793-aece-1d5b773696a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e14ed39fc8ba60b5a83d7d4ab043225c9d942ae4f28ffa437150fd8eb141254"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e9ef33.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e9ef33/sub-test-model-e9ef33\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e9ef33/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51eb0113-49bf-43e2-bbfd-6a60d82899b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37738","PortSpecifier":{"PortValue":37738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26949c0d-6472-4f6e-ae42-d0d01343c378","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37738","PortSpecifier":{"PortValue":37738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784690542,"nanos":648511905},"http":{"id":"26949c0d-6472-4f6e-ae42-d0d01343c378","method":"GET","headers":{":authority":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EN0Ov40CwE44PLR4_JLSAeM9OxB4xrCp5sVv0dkZ1pkyHQMPPW2T3bBZNrho"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EN0Ov40CwE44PLR4_JLSAeM9OxB4xrCp5sVv0dkZ1pkyHQMPPW2T3bBZNrho\"}"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"29b52ca4-9d63-4d66-8d47-96349f22b312","keyName":"e2e-sub-iso-b58b17","subscription":"e2e-a-only-c8210d","tenant":"e2e-shared-a-72501c","userId":"29b52ca4-9d63-4d66-8d47-96349f22b312","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72501c/sub-test-model-72501c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-c8210d"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26949c0d-6472-4f6e-ae42-d0d01343c378","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49726","PortSpecifier":{"PortValue":49726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1065339-e257-4bce-abc9-a6f1053235cb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e9ef33.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49726","PortSpecifier":{"PortValue":49726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784690542,"nanos":691691974},"http":{"id":"e1065339-e257-4bce-abc9-a6f1053235cb","method":"GET","headers":{":authority":"e2e-shared-b-e9ef33.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YgI9DzBFPwUs8hp7_hid1rWZ2NyHwlF2ltklaSoEBOPG1JLZfVmdAP0bD4eH"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e9ef33.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YgI9DzBFPwUs8hp7_hid1rWZ2NyHwlF2ltklaSoEBOPG1JLZfVmdAP0bD4eH\"}"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e9ef33.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2b9839a4-27c2-4af5-8876-589a73eb1fd3","keyName":"e2e-sub-iso-d1c313","subscription":"e2e-b-only-c8210d","tenant":"e2e-shared-b-e9ef33","userId":"2b9839a4-27c2-4af5-8876-589a73eb1fd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e9ef33/sub-test-model-e9ef33\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e9ef33/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-c8210d"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:22:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1065339-e257-4bce-abc9-a6f1053235cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56702","PortSpecifier":{"PortValue":56702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56702","PortSpecifier":{"PortValue":56702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784690552,"nanos":676236941},"http":{"id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","method":"POST","headers":{":authority":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8a9b6c3c-6962-4793-aece-1d5b773696a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0407a5c-71e6-4411-ad5a-276fa1d8d350"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9272e118374d"]}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9272e118374d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0407a5c-71e6-4411-ad5a-276fa1d8d350"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8a9b6c3c-6962-4793-aece-1d5b773696a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72501c/sub-test-model-72501c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c4284ae-9537-43b1-a6be-b7b2edfd6067","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38742","PortSpecifier":{"PortValue":38742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e9ef33.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38742","PortSpecifier":{"PortValue":38742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784690552,"nanos":713862273},"http":{"id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","method":"POST","headers":{":authority":"e2e-shared-b-e9ef33.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8a9b6c3c-6962-4793-aece-1d5b773696a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0407a5c-71e6-4411-ad5a-276fa1d8d350"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9272e118374d"]}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9272e118374d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0407a5c-71e6-4411-ad5a-276fa1d8d350"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8a9b6c3c-6962-4793-aece-1d5b773696a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e14ed39fc8ba60b5a83d7d4ab043225c9d942ae4f28ffa437150fd8eb141254"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e9ef33.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e9ef33/sub-test-model-e9ef33\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e9ef33/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae2a6ea3-e100-4aed-a84e-d1d82106dcd7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56704","PortSpecifier":{"PortValue":56704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56704","PortSpecifier":{"PortValue":56704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784690552,"nanos":751741264},"http":{"id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","method":"POST","headers":{":authority":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KUE6DHSRv2uBLtJM_JDeztLVFdkRQGIxLWLMCCzAcCXWRa8Iq6UzsFdgchuM"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KUE6DHSRv2uBLtJM_JDeztLVFdkRQGIxLWLMCCzAcCXWRa8Iq6UzsFdgchuM\"}"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f73a0a74-54e9-4735-9458-87e1c451b51f","keyName":"e2e-sub-iso-502c9d","subscription":"e2e-shared-sub-4f6f95","tenant":"e2e-shared-a-72501c","userId":"f73a0a74-54e9-4735-9458-87e1c451b51f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72501c/sub-test-model-72501c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4f6f95"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"032bc9f2-3f50-4838-aad7-4205a7e90c0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38758","PortSpecifier":{"PortValue":38758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-e9ef33.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38758","PortSpecifier":{"PortValue":38758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784690552,"nanos":784434982},"http":{"id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","method":"POST","headers":{":authority":"e2e-shared-b-e9ef33.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eoQbEnPoqV1DOBoV_akCjAQcNxmN1wVt27b9pKTBLzQhf5CRnigomlXK9kkg"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e9ef33.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eoQbEnPoqV1DOBoV_akCjAQcNxmN1wVt27b9pKTBLzQhf5CRnigomlXK9kkg\"}"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e9ef33.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88c3ab45-183c-4df0-bab6-fbea4d92cc51","keyName":"e2e-sub-iso-0c00c4","subscription":"e2e-shared-sub-4f6f95","tenant":"e2e-shared-b-e9ef33","userId":"88c3ab45-183c-4df0-bab6-fbea4d92cc51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e9ef33/sub-test-model-e9ef33\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e9ef33/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4f6f95"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:22:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f9fb5dd-98f1-4b5a-8911-48ae2d087f80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fea9ed75ab6410d8183d4df62e0f40f17014f1ba08c0a1a642276d19b08ac609"}
{"level":"info","ts":"2026-07-22T03:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/103d27ac775ab021a038ac996fc8e2772b1898e24a5d80bf082ff716dc682b5e"}
{"level":"info","ts":"2026-07-22T03:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64e2acce2552ea1ae2bb87c2b2dcb521bed05139e146dfca576b806b5f637341"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf5082bf55dd1a16352c157946325ccaf0255a60ec5aef666ab7dbae02449117"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/870bcb0d9c1134cc2efc58e19eb42f9c0bc2bb6f9ce84f5bdb6ee967d4f9fd51"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ebabd2be4d6ce58943e5bdf01cd4ac1f78a0280ea4193e349db24f070f1b16f"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7854832ed8aeb43e7086efff0128fb36dfe0bb1ec9c259d9e9c76f2a907dac9d"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e14ed39fc8ba60b5a83d7d4ab043225c9d942ae4f28ffa437150fd8eb141254"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c2f58abf9fd1e22e4900cdde3b79bfed6fdd82165a87d43bd43240372788900"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e23c2dd4d7453a40367595e0f9cdf80ffcaa428e825a4d1f15dd281a6a6aa435"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa668696dc69a29e6d5347b6033b04c15667e72acfbf544d76cbe657d2836cab"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ac015e565e9fb766613747f87e410e42246517842015aca44c60eb2b3f7bb8a"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4932baf5f166af6a43eac00c3b0c3eb43152071436bf99c4b6b6490eb966dfee"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac4afb926ddf7ffe4ffad657d7db330737af76ada96cbbe02fa92c1fed34c133"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a8d14cf2b617384088fb3fa21b38449afb2a3f2d649c187c53db9db982d2a1"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d315652f44b08353d8104f1208b7fc9692bcd4653eddf8ad7ed288577979376f"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07a77c759bf0c6c74cea5894f1e85f15dc906ec6e4a8d1035c0eeea04273b361"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15dd027e716ae9c768982e95f9abae9a48652864f9526fa96935f91791ab7107"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f2abe903cb3c49138ab5a7b8647ea9e0f31d8ceb3bdbf43798b81095005ce24"}
{"level":"info","ts":"2026-07-22T03:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59b017e03bdb0d0c73498b8a6a3fb4b4631d03e68796c70dabcc29d36747d919"}
{"level":"debug","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"}
{"level":"debug","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"}
{"level":"debug","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"}
{"level":"debug","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"}
{"level":"debug","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4293829afce90bc3c964fa79de49407d7ce5ee031f869e7d65247628add78b1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4293829afce90bc3c964fa79de49407d7ce5ee031f869e7d65247628add78b1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4293829afce90bc3c964fa79de49407d7ce5ee031f869e7d65247628add78b1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4293829afce90bc3c964fa79de49407d7ce5ee031f869e7d65247628add78b1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4293829afce90bc3c964fa79de49407d7ce5ee031f869e7d65247628add78b1d"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4293829afce90bc3c964fa79de49407d7ce5ee031f869e7d65247628add78b1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4293829afce90bc3c964fa79de49407d7ce5ee031f869e7d65247628add78b1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4293829afce90bc3c964fa79de49407d7ce5ee031f869e7d65247628add78b1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4293829afce90bc3c964fa79de49407d7ce5ee031f869e7d65247628add78b1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4293829afce90bc3c964fa79de49407d7ce5ee031f869e7d65247628add78b1d"}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858"}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858"}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858"}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e"}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858"}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e"}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f"}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340"}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cd5d8d67ec57e18d7e0bf4ae524e21ed6f4ec95534eefd827f3e347a3d9cd7a"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cd5d8d67ec57e18d7e0bf4ae524e21ed6f4ec95534eefd827f3e347a3d9cd7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cd5d8d67ec57e18d7e0bf4ae524e21ed6f4ec95534eefd827f3e347a3d9cd7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cd5d8d67ec57e18d7e0bf4ae524e21ed6f4ec95534eefd827f3e347a3d9cd7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cd5d8d67ec57e18d7e0bf4ae524e21ed6f4ec95534eefd827f3e347a3d9cd7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e"}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cd5d8d67ec57e18d7e0bf4ae524e21ed6f4ec95534eefd827f3e347a3d9cd7a"}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340"}
{"level":"info","ts":"2026-07-22T03:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f"}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e087871542ef753a17ce245fe9d0768de8452405037586dd04e2e5f7ab4147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e087871542ef753a17ce245fe9d0768de8452405037586dd04e2e5f7ab4147","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e087871542ef753a17ce245fe9d0768de8452405037586dd04e2e5f7ab4147"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e087871542ef753a17ce245fe9d0768de8452405037586dd04e2e5f7ab4147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77e087871542ef753a17ce245fe9d0768de8452405037586dd04e2e5f7ab4147"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e087871542ef753a17ce245fe9d0768de8452405037586dd04e2e5f7ab4147","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e087871542ef753a17ce245fe9d0768de8452405037586dd04e2e5f7ab4147"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77e087871542ef753a17ce245fe9d0768de8452405037586dd04e2e5f7ab4147","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74"}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e087871542ef753a17ce245fe9d0768de8452405037586dd04e2e5f7ab4147"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d315652f44b08353d8104f1208b7fc9692bcd4653eddf8ad7ed288577979376f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d315652f44b08353d8104f1208b7fc9692bcd4653eddf8ad7ed288577979376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f02f1d76f3cf7346a68cae5cc5f8bf750aede4fff3943579c567c3e22ac80a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f02f1d76f3cf7346a68cae5cc5f8bf750aede4fff3943579c567c3e22ac80a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad4333e4a5c1a8b51341915abc1c72edccc18c486f6a8bd4b7cf6118b471631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d315652f44b08353d8104f1208b7fc9692bcd4653eddf8ad7ed288577979376f"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f02f1d76f3cf7346a68cae5cc5f8bf750aede4fff3943579c567c3e22ac80a"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bad4333e4a5c1a8b51341915abc1c72edccc18c486f6a8bd4b7cf6118b471631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d315652f44b08353d8104f1208b7fc9692bcd4653eddf8ad7ed288577979376f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d315652f44b08353d8104f1208b7fc9692bcd4653eddf8ad7ed288577979376f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad4333e4a5c1a8b51341915abc1c72edccc18c486f6a8bd4b7cf6118b471631"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d41ba3d5bb5e2bbf91f3087113265d05afebff072c4f758a94b86bb677bf2b42"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d315652f44b08353d8104f1208b7fc9692bcd4653eddf8ad7ed288577979376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d41ba3d5bb5e2bbf91f3087113265d05afebff072c4f758a94b86bb677bf2b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d41ba3d5bb5e2bbf91f3087113265d05afebff072c4f758a94b86bb677bf2b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d41ba3d5bb5e2bbf91f3087113265d05afebff072c4f758a94b86bb677bf2b42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2ec80053403b954e8cedeb22669f7aafc42b5a87798eb0998fb1e0a9505598f"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e23c2dd4d7453a40367595e0f9cdf80ffcaa428e825a4d1f15dd281a6a6aa435"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84f02f1d76f3cf7346a68cae5cc5f8bf750aede4fff3943579c567c3e22ac80a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84f02f1d76f3cf7346a68cae5cc5f8bf750aede4fff3943579c567c3e22ac80a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d315652f44b08353d8104f1208b7fc9692bcd4653eddf8ad7ed288577979376f"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84f02f1d76f3cf7346a68cae5cc5f8bf750aede4fff3943579c567c3e22ac80a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2ec80053403b954e8cedeb22669f7aafc42b5a87798eb0998fb1e0a9505598f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2ec80053403b954e8cedeb22669f7aafc42b5a87798eb0998fb1e0a9505598f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e14ed39fc8ba60b5a83d7d4ab043225c9d942ae4f28ffa437150fd8eb141254"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf5082bf55dd1a16352c157946325ccaf0255a60ec5aef666ab7dbae02449117"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58db121430e3b0f435042d76aa64467e1c7c5f38ea668986cd0a8d87c669fac"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2ec80053403b954e8cedeb22669f7aafc42b5a87798eb0998fb1e0a9505598f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e23c2dd4d7453a40367595e0f9cdf80ffcaa428e825a4d1f15dd281a6a6aa435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e23c2dd4d7453a40367595e0f9cdf80ffcaa428e825a4d1f15dd281a6a6aa435"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d41ba3d5bb5e2bbf91f3087113265d05afebff072c4f758a94b86bb677bf2b42"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51468082f99f9d27e4cc386ef19fddc73fd3828056d93295ce4dac69e9759fce"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e23c2dd4d7453a40367595e0f9cdf80ffcaa428e825a4d1f15dd281a6a6aa435","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad4333e4a5c1a8b51341915abc1c72edccc18c486f6a8bd4b7cf6118b471631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bad4333e4a5c1a8b51341915abc1c72edccc18c486f6a8bd4b7cf6118b471631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6d48ae902a04ccf123a00cdb0006202709594382f6c10b48b8bfd5753442812"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bad4333e4a5c1a8b51341915abc1c72edccc18c486f6a8bd4b7cf6118b471631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d315652f44b08353d8104f1208b7fc9692bcd4653eddf8ad7ed288577979376f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e14ed39fc8ba60b5a83d7d4ab043225c9d942ae4f28ffa437150fd8eb141254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e14ed39fc8ba60b5a83d7d4ab043225c9d942ae4f28ffa437150fd8eb141254"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84f02f1d76f3cf7346a68cae5cc5f8bf750aede4fff3943579c567c3e22ac80a"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2ec80053403b954e8cedeb22669f7aafc42b5a87798eb0998fb1e0a9505598f"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e14ed39fc8ba60b5a83d7d4ab043225c9d942ae4f28ffa437150fd8eb141254","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf5082bf55dd1a16352c157946325ccaf0255a60ec5aef666ab7dbae02449117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf5082bf55dd1a16352c157946325ccaf0255a60ec5aef666ab7dbae02449117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e23c2dd4d7453a40367595e0f9cdf80ffcaa428e825a4d1f15dd281a6a6aa435"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad4333e4a5c1a8b51341915abc1c72edccc18c486f6a8bd4b7cf6118b471631"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e14ed39fc8ba60b5a83d7d4ab043225c9d942ae4f28ffa437150fd8eb141254"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf5082bf55dd1a16352c157946325ccaf0255a60ec5aef666ab7dbae02449117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58db121430e3b0f435042d76aa64467e1c7c5f38ea668986cd0a8d87c669fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58db121430e3b0f435042d76aa64467e1c7c5f38ea668986cd0a8d87c669fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf5082bf55dd1a16352c157946325ccaf0255a60ec5aef666ab7dbae02449117"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58db121430e3b0f435042d76aa64467e1c7c5f38ea668986cd0a8d87c669fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d41ba3d5bb5e2bbf91f3087113265d05afebff072c4f758a94b86bb677bf2b42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51468082f99f9d27e4cc386ef19fddc73fd3828056d93295ce4dac69e9759fce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51468082f99f9d27e4cc386ef19fddc73fd3828056d93295ce4dac69e9759fce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58db121430e3b0f435042d76aa64467e1c7c5f38ea668986cd0a8d87c669fac"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51468082f99f9d27e4cc386ef19fddc73fd3828056d93295ce4dac69e9759fce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6d48ae902a04ccf123a00cdb0006202709594382f6c10b48b8bfd5753442812","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:23:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6d48ae902a04ccf123a00cdb0006202709594382f6c10b48b8bfd5753442812"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51468082f99f9d27e4cc386ef19fddc73fd3828056d93295ce4dac69e9759fce"}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6d48ae902a04ccf123a00cdb0006202709594382f6c10b48b8bfd5753442812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84f02f1d76f3cf7346a68cae5cc5f8bf750aede4fff3943579c567c3e22ac80a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2ec80053403b954e8cedeb22669f7aafc42b5a87798eb0998fb1e0a9505598f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e23c2dd4d7453a40367595e0f9cdf80ffcaa428e825a4d1f15dd281a6a6aa435","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bad4333e4a5c1a8b51341915abc1c72edccc18c486f6a8bd4b7cf6118b471631","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e14ed39fc8ba60b5a83d7d4ab043225c9d942ae4f28ffa437150fd8eb141254","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf5082bf55dd1a16352c157946325ccaf0255a60ec5aef666ab7dbae02449117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58db121430e3b0f435042d76aa64467e1c7c5f38ea668986cd0a8d87c669fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51468082f99f9d27e4cc386ef19fddc73fd3828056d93295ce4dac69e9759fce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6d48ae902a04ccf123a00cdb0006202709594382f6c10b48b8bfd5753442812","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:23:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6d48ae902a04ccf123a00cdb0006202709594382f6c10b48b8bfd5753442812"}
{"level":"info","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38396","PortSpecifier":{"PortValue":38396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38396","PortSpecifier":{"PortValue":38396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784690616,"nanos":362733945},"http":{"id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","method":"POST","headers":{":authority":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8a9b6c3c-6962-4793-aece-1d5b773696a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0407a5c-71e6-4411-ad5a-276fa1d8d350"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9272e118374d"]}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9272e118374d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0407a5c-71e6-4411-ad5a-276fa1d8d350"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8a9b6c3c-6962-4793-aece-1d5b773696a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd9c2f4d-5854-454b-b812-482f3c1de20c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95442348-180f-4154-b813-479b218ee0db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43186","PortSpecifier":{"PortValue":43186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95442348-180f-4154-b813-479b218ee0db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e9ef33.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95442348-180f-4154-b813-479b218ee0db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43186","PortSpecifier":{"PortValue":43186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784690616,"nanos":405962391},"http":{"id":"95442348-180f-4154-b813-479b218ee0db","method":"POST","headers":{":authority":"e2e-shared-b-e9ef33.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95442348-180f-4154-b813-479b218ee0db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95442348-180f-4154-b813-479b218ee0db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8a9b6c3c-6962-4793-aece-1d5b773696a9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0407a5c-71e6-4411-ad5a-276fa1d8d350"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9272e118374d"]}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95442348-180f-4154-b813-479b218ee0db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9272e118374d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0407a5c-71e6-4411-ad5a-276fa1d8d350"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8a9b6c3c-6962-4793-aece-1d5b773696a9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e14ed39fc8ba60b5a83d7d4ab043225c9d942ae4f28ffa437150fd8eb141254"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e9ef33.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95442348-180f-4154-b813-479b218ee0db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95442348-180f-4154-b813-479b218ee0db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95442348-180f-4154-b813-479b218ee0db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e9ef33/rate-test-model-e9ef33\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e9ef33/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95442348-180f-4154-b813-479b218ee0db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95442348-180f-4154-b813-479b218ee0db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95442348-180f-4154-b813-479b218ee0db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95442348-180f-4154-b813-479b218ee0db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95442348-180f-4154-b813-479b218ee0db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"031e3135-193c-455f-ab70-0f337033702b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38412","PortSpecifier":{"PortValue":38412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"031e3135-193c-455f-ab70-0f337033702b","method":"POST","path":"/ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c/v1/completions","host":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"031e3135-193c-455f-ab70-0f337033702b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38412","PortSpecifier":{"PortValue":38412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784690616,"nanos":449413604},"http":{"id":"031e3135-193c-455f-ab70-0f337033702b","method":"POST","headers":{":authority":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"031e3135-193c-455f-ab70-0f337033702b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QDiLqtOdFsKm2qOL_fKiiKniiGRjCpHSvuVMIJQb7QvHrNArkZbvUG51mYH6"}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"031e3135-193c-455f-ab70-0f337033702b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QDiLqtOdFsKm2qOL_fKiiKniiGRjCpHSvuVMIJQb7QvHrNArkZbvUG51mYH6\"}"}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"031e3135-193c-455f-ab70-0f337033702b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"715096b7-2208-41b4-bb33-e6a9ab928046","keyName":"e2e-rate-a-84cfc7","subscription":"e2e-rate-iso-a-84cfc7","tenant":"e2e-shared-a-72501c","userId":"715096b7-2208-41b4-bb33-e6a9ab928046","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"031e3135-193c-455f-ab70-0f337033702b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c\",\"requestedSubscription\":\"e2e-rate-iso-a-84cfc7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"031e3135-193c-455f-ab70-0f337033702b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m","name":"rate-test-model-72501c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-84cfc7","namespace":"ai-tenant-e2e-shared-a-72501c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c"}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"031e3135-193c-455f-ab70-0f337033702b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"031e3135-193c-455f-ab70-0f337033702b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"031e3135-193c-455f-ab70-0f337033702b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"031e3135-193c-455f-ab70-0f337033702b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"031e3135-193c-455f-ab70-0f337033702b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"031e3135-193c-455f-ab70-0f337033702b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"031e3135-193c-455f-ab70-0f337033702b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"031e3135-193c-455f-ab70-0f337033702b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-84cfc7"}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"031e3135-193c-455f-ab70-0f337033702b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"715096b7-2208-41b4-bb33-e6a9ab928046","keyName":"e2e-rate-a-84cfc7","selected_subscription":"e2e-rate-iso-a-84cfc7","selected_subscription_key":"ai-tenant-e2e-shared-a-72501c/e2e-rate-iso-a-84cfc7@ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m","name":"rate-test-model-72501c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-84cfc7","namespace":"ai-tenant-e2e-shared-a-72501c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"031e3135-193c-455f-ab70-0f337033702b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:23:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"031e3135-193c-455f-ab70-0f337033702b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38428","PortSpecifier":{"PortValue":38428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4be78a8c-f266-4d55-9165-ba506818a7f7","method":"POST","path":"/ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c/v1/completions","host":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38428","PortSpecifier":{"PortValue":38428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784690617,"nanos":514119448},"http":{"id":"4be78a8c-f266-4d55-9165-ba506818a7f7","method":"POST","headers":{":authority":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QDiLqtOdFsKm2qOL_fKiiKniiGRjCpHSvuVMIJQb7QvHrNArkZbvUG51mYH6"}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QDiLqtOdFsKm2qOL_fKiiKniiGRjCpHSvuVMIJQb7QvHrNArkZbvUG51mYH6\"}"}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"715096b7-2208-41b4-bb33-e6a9ab928046","keyName":"e2e-rate-a-84cfc7","subscription":"e2e-rate-iso-a-84cfc7","tenant":"e2e-shared-a-72501c","userId":"715096b7-2208-41b4-bb33-e6a9ab928046","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c\",\"requestedSubscription\":\"e2e-rate-iso-a-84cfc7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m","name":"rate-test-model-72501c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-84cfc7","namespace":"ai-tenant-e2e-shared-a-72501c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c"}}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-84cfc7"}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"715096b7-2208-41b4-bb33-e6a9ab928046","keyName":"e2e-rate-a-84cfc7","selected_subscription":"e2e-rate-iso-a-84cfc7","selected_subscription_key":"ai-tenant-e2e-shared-a-72501c/e2e-rate-iso-a-84cfc7@ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m","name":"rate-test-model-72501c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-84cfc7","namespace":"ai-tenant-e2e-shared-a-72501c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:23:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4be78a8c-f266-4d55-9165-ba506818a7f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43466","PortSpecifier":{"PortValue":43466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","method":"POST","path":"/ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c/v1/completions","host":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43466","PortSpecifier":{"PortValue":43466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784690618,"nanos":549840291},"http":{"id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","method":"POST","headers":{":authority":"e2e-shared-a-72501c.apps.d9d4b15e-f76f-477f-bd83-9272e118374d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QDiLqtOdFsKm2qOL_fKiiKniiGRjCpHSvuVMIJQb7QvHrNArkZbvUG51mYH6"}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QDiLqtOdFsKm2qOL_fKiiKniiGRjCpHSvuVMIJQb7QvHrNArkZbvUG51mYH6\"}"}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"715096b7-2208-41b4-bb33-e6a9ab928046","keyName":"e2e-rate-a-84cfc7","subscription":"e2e-rate-iso-a-84cfc7","tenant":"e2e-shared-a-72501c","userId":"715096b7-2208-41b4-bb33-e6a9ab928046","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c\",\"requestedSubscription\":\"e2e-rate-iso-a-84cfc7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72501c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m","name":"rate-test-model-72501c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-84cfc7","namespace":"ai-tenant-e2e-shared-a-72501c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c"}}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-84cfc7"}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"715096b7-2208-41b4-bb33-e6a9ab928046","keyName":"e2e-rate-a-84cfc7","selected_subscription":"e2e-rate-iso-a-84cfc7","selected_subscription_key":"ai-tenant-e2e-shared-a-72501c/e2e-rate-iso-a-84cfc7@ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-72501c/models/facebook/opt-125m","name":"rate-test-model-72501c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-84cfc7","namespace":"ai-tenant-e2e-shared-a-72501c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-72501c/rate-test-model-72501c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:23:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44bb6f17-3cfd-4c48-9e13-434e847e6408","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84f02f1d76f3cf7346a68cae5cc5f8bf750aede4fff3943579c567c3e22ac80a"}
{"level":"info","ts":"2026-07-22T03:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3af9f1c5027a7b08c82e1fa4e7ca9f37c9f008786f9e2ebbd2c7808f539a2d1f"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d41ba3d5bb5e2bbf91f3087113265d05afebff072c4f758a94b86bb677bf2b42"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77e087871542ef753a17ce245fe9d0768de8452405037586dd04e2e5f7ab4147"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cd5d8d67ec57e18d7e0bf4ae524e21ed6f4ec95534eefd827f3e347a3d9cd7a"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e14ed39fc8ba60b5a83d7d4ab043225c9d942ae4f28ffa437150fd8eb141254"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d315652f44b08353d8104f1208b7fc9692bcd4653eddf8ad7ed288577979376f"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2ec80053403b954e8cedeb22669f7aafc42b5a87798eb0998fb1e0a9505598f"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e58db121430e3b0f435042d76aa64467e1c7c5f38ea668986cd0a8d87c669fac"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51468082f99f9d27e4cc386ef19fddc73fd3828056d93295ce4dac69e9759fce"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bad4333e4a5c1a8b51341915abc1c72edccc18c486f6a8bd4b7cf6118b471631"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfab48eaa129e6be7dbec30fd5798b3ee0b77806df992c2d45ad577327512340"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e23c2dd4d7453a40367595e0f9cdf80ffcaa428e825a4d1f15dd281a6a6aa435"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf5082bf55dd1a16352c157946325ccaf0255a60ec5aef666ab7dbae02449117"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b945dc877116a98f71ae8b12b366b3a248e78695fcd9d1961f94e99d6405883f"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a294df655a8dfc3532afaa6b02f47a4d780a5df67bb3520cb7370005d42c647f"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/319c6d77a0db9207fee1ad07bf4419684c3219b51ee4ffc18185a7e125b5c51e"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4293829afce90bc3c964fa79de49407d7ce5ee031f869e7d65247628add78b1d"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44b300a137c4dc3bca26c4419cd48368d94c1905e793170b223ab9b73f9b4c74"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a04a8a1999d68a1920a7a83c0e798a0711eae2591a124a510c8efa3f3d689b9"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77f4c33417a998a7c07504ff17bab7c064376f852ed35ea2b9a99e2e7aeeaa1e"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51eab064b1f529d711a96e42811b431808927a0ae8d5bcca9ba84f27e8540331"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6d48ae902a04ccf123a00cdb0006202709594382f6c10b48b8bfd5753442812"}
{"level":"info","ts":"2026-07-22T03:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01b5fe665b2aadf283a56ead74ccf8134c6882f9efe3f7d4f6b88ee477ed8858"}