{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2382dc81e03f4b29a26723452ab00a20e2a4cfd39033b1a7fcf35d7f36a6c001"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dea1e3a0ce03164b60b7de93f6d9dbe003ea73a3de34a0d81fc6eaa84cf412cb"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c1100f92a4b6ceebdbdce85e9b4cb84b1531bda51c833ef1f2a9336ec79a21a"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22c4a1e23e58465169990dc942fa46b4fb59cea2fed4594ccc75b2a495b2161e"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af70c7ec786bd389cafbc6bea5413fe5126841149e577cabd6bce30adf40beb0"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0254c8a9e0d21e24a6b9843c5135d91d8d5ba7ddfbe1b755156368ded2566f3d"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/772927083e77349b878ac22019a747c793235ba3e4cca4ac3b3d29d87d723e81"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c51c3ab0c72e538b2e6dad60ebd9ad693ffb65c801fdd451c958a3583139311c"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3e1a661b6440f87097bf02f48e81396055038d60ab142a1113d5a5a245dccc1"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eefbedc20b59b67a1bb3dd743a399d3fbce69e6467a01c53cfb0137961d3a1eb"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71fb6213a2ad4ca573706ced7d830321fc1b1d422df793bdf6d31977d5703e03"}
{"level":"info","ts":"2026-07-19T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/656e69321999c9d1bc6bdf630ba32ceec32ac0f6103b2d7960cf31537fdbc9a0"}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832"}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832"}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832"}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832"}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832"}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832"}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832"}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b"}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b"}
{"level":"info","ts":"2026-07-19T15:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b"}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b"}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b"}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed089a4b0fdc0e632851fd0d62e5fa40879f685525b71706dc815c78b90545d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed089a4b0fdc0e632851fd0d62e5fa40879f685525b71706dc815c78b90545d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ed089a4b0fdc0e632851fd0d62e5fa40879f685525b71706dc815c78b90545d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed089a4b0fdc0e632851fd0d62e5fa40879f685525b71706dc815c78b90545d"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ed089a4b0fdc0e632851fd0d62e5fa40879f685525b71706dc815c78b90545d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed089a4b0fdc0e632851fd0d62e5fa40879f685525b71706dc815c78b90545d"}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ed089a4b0fdc0e632851fd0d62e5fa40879f685525b71706dc815c78b90545d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ed089a4b0fdc0e632851fd0d62e5fa40879f685525b71706dc815c78b90545d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ed089a4b0fdc0e632851fd0d62e5fa40879f685525b71706dc815c78b90545d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ed089a4b0fdc0e632851fd0d62e5fa40879f685525b71706dc815c78b90545d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ed089a4b0fdc0e632851fd0d62e5fa40879f685525b71706dc815c78b90545d"}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357"}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357"}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"087a747bfdb6bf12850c254b468ede87a411a113c84633ab3651cf5c6998ce03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"087a747bfdb6bf12850c254b468ede87a411a113c84633ab3651cf5c6998ce03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"087a747bfdb6bf12850c254b468ede87a411a113c84633ab3651cf5c6998ce03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82"}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"087a747bfdb6bf12850c254b468ede87a411a113c84633ab3651cf5c6998ce03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/087a747bfdb6bf12850c254b468ede87a411a113c84633ab3651cf5c6998ce03"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"087a747bfdb6bf12850c254b468ede87a411a113c84633ab3651cf5c6998ce03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"087a747bfdb6bf12850c254b468ede87a411a113c84633ab3651cf5c6998ce03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["087a747bfdb6bf12850c254b468ede87a411a113c84633ab3651cf5c6998ce03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"087a747bfdb6bf12850c254b468ede87a411a113c84633ab3651cf5c6998ce03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d"}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"087a747bfdb6bf12850c254b468ede87a411a113c84633ab3651cf5c6998ce03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"087a747bfdb6bf12850c254b468ede87a411a113c84633ab3651cf5c6998ce03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82"}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e59f998c22e6848f2947e84183f2758c94c2702c50b00aeb440c0f4f040474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e59f998c22e6848f2947e84183f2758c94c2702c50b00aeb440c0f4f040474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/087a747bfdb6bf12850c254b468ede87a411a113c84633ab3651cf5c6998ce03"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e59f998c22e6848f2947e84183f2758c94c2702c50b00aeb440c0f4f040474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e59f998c22e6848f2947e84183f2758c94c2702c50b00aeb440c0f4f040474"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e59f998c22e6848f2947e84183f2758c94c2702c50b00aeb440c0f4f040474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e59f998c22e6848f2947e84183f2758c94c2702c50b00aeb440c0f4f040474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4e59f998c22e6848f2947e84183f2758c94c2702c50b00aeb440c0f4f040474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e59f998c22e6848f2947e84183f2758c94c2702c50b00aeb440c0f4f040474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4e59f998c22e6848f2947e84183f2758c94c2702c50b00aeb440c0f4f040474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022"}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e59f998c22e6848f2947e84183f2758c94c2702c50b00aeb440c0f4f040474"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022"}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68d83dde7ce469e4d2b497d7a5a3d073b0d3672c7a965aa1d73356b52d564bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68d83dde7ce469e4d2b497d7a5a3d073b0d3672c7a965aa1d73356b52d564bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68d83dde7ce469e4d2b497d7a5a3d073b0d3672c7a965aa1d73356b52d564bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68d83dde7ce469e4d2b497d7a5a3d073b0d3672c7a965aa1d73356b52d564bd5"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68d83dde7ce469e4d2b497d7a5a3d073b0d3672c7a965aa1d73356b52d564bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68d83dde7ce469e4d2b497d7a5a3d073b0d3672c7a965aa1d73356b52d564bd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68d83dde7ce469e4d2b497d7a5a3d073b0d3672c7a965aa1d73356b52d564bd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68d83dde7ce469e4d2b497d7a5a3d073b0d3672c7a965aa1d73356b52d564bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68d83dde7ce469e4d2b497d7a5a3d073b0d3672c7a965aa1d73356b52d564bd5"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68d83dde7ce469e4d2b497d7a5a3d073b0d3672c7a965aa1d73356b52d564bd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c1100f92a4b6ceebdbdce85e9b4cb84b1531bda51c833ef1f2a9336ec79a21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c1100f92a4b6ceebdbdce85e9b4cb84b1531bda51c833ef1f2a9336ec79a21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b19c708a8f5897e24fb3e9057e19ba675e14750c0bb4740ce1afdca80ff3ea3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68d83dde7ce469e4d2b497d7a5a3d073b0d3672c7a965aa1d73356b52d564bd5"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b19c708a8f5897e24fb3e9057e19ba675e14750c0bb4740ce1afdca80ff3ea3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c1100f92a4b6ceebdbdce85e9b4cb84b1531bda51c833ef1f2a9336ec79a21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c1100f92a4b6ceebdbdce85e9b4cb84b1531bda51c833ef1f2a9336ec79a21a"}
{"level":"info","ts":"2026-07-19T15:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b19c708a8f5897e24fb3e9057e19ba675e14750c0bb4740ce1afdca80ff3ea3c"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c1100f92a4b6ceebdbdce85e9b4cb84b1531bda51c833ef1f2a9336ec79a21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1772d686c1ea5d5ff34279549930235cd28e16636969addee7cbb4fc3f3739d2"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c1100f92a4b6ceebdbdce85e9b4cb84b1531bda51c833ef1f2a9336ec79a21a"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b19c708a8f5897e24fb3e9057e19ba675e14750c0bb4740ce1afdca80ff3ea3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b19c708a8f5897e24fb3e9057e19ba675e14750c0bb4740ce1afdca80ff3ea3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/967e95bc513f712f2e57812e0f9bf5f3dfbb58cd4d597b103fb93c84dd85b301"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c6a58338fb83a4f4e346bcee6f3858e09b56985a1820f12325f3ce56ca73520"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b19c708a8f5897e24fb3e9057e19ba675e14750c0bb4740ce1afdca80ff3ea3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1772d686c1ea5d5ff34279549930235cd28e16636969addee7cbb4fc3f3739d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1772d686c1ea5d5ff34279549930235cd28e16636969addee7cbb4fc3f3739d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eefbedc20b59b67a1bb3dd743a399d3fbce69e6467a01c53cfb0137961d3a1eb"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de6c029957b94cb0cde7200f91ef2886b24cf9643b1b123fc17960627cd3725b"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1772d686c1ea5d5ff34279549930235cd28e16636969addee7cbb4fc3f3739d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c1100f92a4b6ceebdbdce85e9b4cb84b1531bda51c833ef1f2a9336ec79a21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c1100f92a4b6ceebdbdce85e9b4cb84b1531bda51c833ef1f2a9336ec79a21a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627a84cccb6ce4467541d0812b14111c5125de7d54fddd92dd686043536bfbbb"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b19c708a8f5897e24fb3e9057e19ba675e14750c0bb4740ce1afdca80ff3ea3c"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c1100f92a4b6ceebdbdce85e9b4cb84b1531bda51c833ef1f2a9336ec79a21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967e95bc513f712f2e57812e0f9bf5f3dfbb58cd4d597b103fb93c84dd85b301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["967e95bc513f712f2e57812e0f9bf5f3dfbb58cd4d597b103fb93c84dd85b301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/507a1a4eb592750c2113e2ed159d9b45e9d7fcdc1e9aaa99cf7ec061181bf3b2"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1a661b6440f87097bf02f48e81396055038d60ab142a1113d5a5a245dccc1"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"967e95bc513f712f2e57812e0f9bf5f3dfbb58cd4d597b103fb93c84dd85b301","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c6a58338fb83a4f4e346bcee6f3858e09b56985a1820f12325f3ce56ca73520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c6a58338fb83a4f4e346bcee6f3858e09b56985a1820f12325f3ce56ca73520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af70c7ec786bd389cafbc6bea5413fe5126841149e577cabd6bce30adf40beb0"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def7dcbd8dc7fe3fcb257f5de5e6df4da7b45ee6fed3986e8f3ed6b5c4c372c6"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1772d686c1ea5d5ff34279549930235cd28e16636969addee7cbb4fc3f3739d2"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c6a58338fb83a4f4e346bcee6f3858e09b56985a1820f12325f3ce56ca73520","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eefbedc20b59b67a1bb3dd743a399d3fbce69e6467a01c53cfb0137961d3a1eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eefbedc20b59b67a1bb3dd743a399d3fbce69e6467a01c53cfb0137961d3a1eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c1100f92a4b6ceebdbdce85e9b4cb84b1531bda51c833ef1f2a9336ec79a21a"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eefbedc20b59b67a1bb3dd743a399d3fbce69e6467a01c53cfb0137961d3a1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de6c029957b94cb0cde7200f91ef2886b24cf9643b1b123fc17960627cd3725b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de6c029957b94cb0cde7200f91ef2886b24cf9643b1b123fc17960627cd3725b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/967e95bc513f712f2e57812e0f9bf5f3dfbb58cd4d597b103fb93c84dd85b301"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c6a58338fb83a4f4e346bcee6f3858e09b56985a1820f12325f3ce56ca73520"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eefbedc20b59b67a1bb3dd743a399d3fbce69e6467a01c53cfb0137961d3a1eb"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de6c029957b94cb0cde7200f91ef2886b24cf9643b1b123fc17960627cd3725b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de6c029957b94cb0cde7200f91ef2886b24cf9643b1b123fc17960627cd3725b"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627a84cccb6ce4467541d0812b14111c5125de7d54fddd92dd686043536bfbbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["627a84cccb6ce4467541d0812b14111c5125de7d54fddd92dd686043536bfbbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627a84cccb6ce4467541d0812b14111c5125de7d54fddd92dd686043536bfbbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b19c708a8f5897e24fb3e9057e19ba675e14750c0bb4740ce1afdca80ff3ea3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"507a1a4eb592750c2113e2ed159d9b45e9d7fcdc1e9aaa99cf7ec061181bf3b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["507a1a4eb592750c2113e2ed159d9b45e9d7fcdc1e9aaa99cf7ec061181bf3b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627a84cccb6ce4467541d0812b14111c5125de7d54fddd92dd686043536bfbbb"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"507a1a4eb592750c2113e2ed159d9b45e9d7fcdc1e9aaa99cf7ec061181bf3b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1a661b6440f87097bf02f48e81396055038d60ab142a1113d5a5a245dccc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3e1a661b6440f87097bf02f48e81396055038d60ab142a1113d5a5a245dccc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/507a1a4eb592750c2113e2ed159d9b45e9d7fcdc1e9aaa99cf7ec061181bf3b2"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1a661b6440f87097bf02f48e81396055038d60ab142a1113d5a5a245dccc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af70c7ec786bd389cafbc6bea5413fe5126841149e577cabd6bce30adf40beb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af70c7ec786bd389cafbc6bea5413fe5126841149e577cabd6bce30adf40beb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1a661b6440f87097bf02f48e81396055038d60ab142a1113d5a5a245dccc1"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af70c7ec786bd389cafbc6bea5413fe5126841149e577cabd6bce30adf40beb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"def7dcbd8dc7fe3fcb257f5de5e6df4da7b45ee6fed3986e8f3ed6b5c4c372c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["def7dcbd8dc7fe3fcb257f5de5e6df4da7b45ee6fed3986e8f3ed6b5c4c372c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af70c7ec786bd389cafbc6bea5413fe5126841149e577cabd6bce30adf40beb0"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"def7dcbd8dc7fe3fcb257f5de5e6df4da7b45ee6fed3986e8f3ed6b5c4c372c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1772d686c1ea5d5ff34279549930235cd28e16636969addee7cbb4fc3f3739d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c1100f92a4b6ceebdbdce85e9b4cb84b1531bda51c833ef1f2a9336ec79a21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def7dcbd8dc7fe3fcb257f5de5e6df4da7b45ee6fed3986e8f3ed6b5c4c372c6"}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"967e95bc513f712f2e57812e0f9bf5f3dfbb58cd4d597b103fb93c84dd85b301","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c6a58338fb83a4f4e346bcee6f3858e09b56985a1820f12325f3ce56ca73520","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eefbedc20b59b67a1bb3dd743a399d3fbce69e6467a01c53cfb0137961d3a1eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6c029957b94cb0cde7200f91ef2886b24cf9643b1b123fc17960627cd3725b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627a84cccb6ce4467541d0812b14111c5125de7d54fddd92dd686043536bfbbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"507a1a4eb592750c2113e2ed159d9b45e9d7fcdc1e9aaa99cf7ec061181bf3b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1a661b6440f87097bf02f48e81396055038d60ab142a1113d5a5a245dccc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af70c7ec786bd389cafbc6bea5413fe5126841149e577cabd6bce30adf40beb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"def7dcbd8dc7fe3fcb257f5de5e6df4da7b45ee6fed3986e8f3ed6b5c4c372c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45"}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45"}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45"}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45"}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T15:36:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T15:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T15:36:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45"}
{"level":"info","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35702","PortSpecifier":{"PortValue":35702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35702","PortSpecifier":{"PortValue":35702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475393,"nanos":232694293},"http":{"id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","method":"POST","headers":{":authority":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a5a978a-66cb-441b-8900-99c53591fafb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9fb72522-c9eb-4e20-8d53-e45e75729733"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/546184804f6f"]}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/546184804f6f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9fb72522-c9eb-4e20-8d53-e45e75729733"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a5a978a-66cb-441b-8900-99c53591fafb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4bc178/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2d9f923-ee4a-42f2-b702-d7fdeb50f51a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edade499-1a40-468d-b657-7a183ba0bd45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34682","PortSpecifier":{"PortValue":34682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"edade499-1a40-468d-b657-7a183ba0bd45","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ccd7ab.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edade499-1a40-468d-b657-7a183ba0bd45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34682","PortSpecifier":{"PortValue":34682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475393,"nanos":276680693},"http":{"id":"edade499-1a40-468d-b657-7a183ba0bd45","method":"POST","headers":{":authority":"e2e-shared-b-ccd7ab.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"edade499-1a40-468d-b657-7a183ba0bd45","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"edade499-1a40-468d-b657-7a183ba0bd45","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a5a978a-66cb-441b-8900-99c53591fafb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9fb72522-c9eb-4e20-8d53-e45e75729733"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/546184804f6f"]}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"edade499-1a40-468d-b657-7a183ba0bd45","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/546184804f6f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9fb72522-c9eb-4e20-8d53-e45e75729733"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a5a978a-66cb-441b-8900-99c53591fafb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af70c7ec786bd389cafbc6bea5413fe5126841149e577cabd6bce30adf40beb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ccd7ab.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edade499-1a40-468d-b657-7a183ba0bd45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edade499-1a40-468d-b657-7a183ba0bd45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edade499-1a40-468d-b657-7a183ba0bd45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ccd7ab/rate-test-model-ccd7ab\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ccd7ab/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"edade499-1a40-468d-b657-7a183ba0bd45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edade499-1a40-468d-b657-7a183ba0bd45","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edade499-1a40-468d-b657-7a183ba0bd45","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edade499-1a40-468d-b657-7a183ba0bd45","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edade499-1a40-468d-b657-7a183ba0bd45","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35712","PortSpecifier":{"PortValue":35712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","method":"POST","path":"/ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178/v1/completions","host":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35712","PortSpecifier":{"PortValue":35712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475393,"nanos":313691380},"http":{"id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","method":"POST","headers":{":authority":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nBTxbMXOvEdVL8rs_9t73y49sN5xsLiYDDF5CeuaG0lwgXSyMzNX5TQQlEr9"}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nBTxbMXOvEdVL8rs_9t73y49sN5xsLiYDDF5CeuaG0lwgXSyMzNX5TQQlEr9\"}"}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bd215923-fac8-4a74-b5eb-13e7523d6502","keyName":"e2e-rate-a-1adac7","subscription":"e2e-rate-iso-a-1adac7","tenant":"e2e-shared-a-4bc178","userId":"bd215923-fac8-4a74-b5eb-13e7523d6502","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\",\"requestedSubscription\":\"e2e-rate-iso-a-1adac7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4bc178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1adac7","namespace":"ai-tenant-e2e-shared-a-4bc178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178"}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4bc178/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1adac7"}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bd215923-fac8-4a74-b5eb-13e7523d6502","keyName":"e2e-rate-a-1adac7","selected_subscription":"e2e-rate-iso-a-1adac7","selected_subscription_key":"ai-tenant-e2e-shared-a-4bc178/e2e-rate-iso-a-1adac7@ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4bc178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1adac7","namespace":"ai-tenant-e2e-shared-a-4bc178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T15:36:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"005b78c3-4751-48b9-a616-7ea62cdd4aa4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35728","PortSpecifier":{"PortValue":35728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","method":"POST","path":"/ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178/v1/completions","host":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35728","PortSpecifier":{"PortValue":35728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475394,"nanos":374792619},"http":{"id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","method":"POST","headers":{":authority":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nBTxbMXOvEdVL8rs_9t73y49sN5xsLiYDDF5CeuaG0lwgXSyMzNX5TQQlEr9"}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nBTxbMXOvEdVL8rs_9t73y49sN5xsLiYDDF5CeuaG0lwgXSyMzNX5TQQlEr9\"}"}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bd215923-fac8-4a74-b5eb-13e7523d6502","keyName":"e2e-rate-a-1adac7","subscription":"e2e-rate-iso-a-1adac7","tenant":"e2e-shared-a-4bc178","userId":"bd215923-fac8-4a74-b5eb-13e7523d6502","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\",\"requestedSubscription\":\"e2e-rate-iso-a-1adac7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4bc178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1adac7","namespace":"ai-tenant-e2e-shared-a-4bc178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178"}}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4bc178/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1adac7"}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bd215923-fac8-4a74-b5eb-13e7523d6502","keyName":"e2e-rate-a-1adac7","selected_subscription":"e2e-rate-iso-a-1adac7","selected_subscription_key":"ai-tenant-e2e-shared-a-4bc178/e2e-rate-iso-a-1adac7@ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4bc178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1adac7","namespace":"ai-tenant-e2e-shared-a-4bc178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T15:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22be7e31-13ed-4a7c-869a-7d0726dd8f90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51304","PortSpecifier":{"PortValue":51304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","method":"POST","path":"/ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178/v1/completions","host":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51304","PortSpecifier":{"PortValue":51304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475395,"nanos":416588608},"http":{"id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","method":"POST","headers":{":authority":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nBTxbMXOvEdVL8rs_9t73y49sN5xsLiYDDF5CeuaG0lwgXSyMzNX5TQQlEr9"}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nBTxbMXOvEdVL8rs_9t73y49sN5xsLiYDDF5CeuaG0lwgXSyMzNX5TQQlEr9\"}"}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bd215923-fac8-4a74-b5eb-13e7523d6502","keyName":"e2e-rate-a-1adac7","subscription":"e2e-rate-iso-a-1adac7","tenant":"e2e-shared-a-4bc178","userId":"bd215923-fac8-4a74-b5eb-13e7523d6502","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\",\"requestedSubscription\":\"e2e-rate-iso-a-1adac7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4bc178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1adac7","namespace":"ai-tenant-e2e-shared-a-4bc178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178"}}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4bc178/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1adac7"}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bd215923-fac8-4a74-b5eb-13e7523d6502","keyName":"e2e-rate-a-1adac7","selected_subscription":"e2e-rate-iso-a-1adac7","selected_subscription_key":"ai-tenant-e2e-shared-a-4bc178/e2e-rate-iso-a-1adac7@ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4bc178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1adac7","namespace":"ai-tenant-e2e-shared-a-4bc178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T15:36:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71196003-2f1e-4b6f-be58-16ef3288d9b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75836832-c9dd-4a0e-b8da-84d204382a90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52356","PortSpecifier":{"PortValue":52356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75836832-c9dd-4a0e-b8da-84d204382a90","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75836832-c9dd-4a0e-b8da-84d204382a90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52356","PortSpecifier":{"PortValue":52356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475406,"nanos":304347863},"http":{"id":"75836832-c9dd-4a0e-b8da-84d204382a90","method":"POST","headers":{":authority":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75836832-c9dd-4a0e-b8da-84d204382a90","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75836832-c9dd-4a0e-b8da-84d204382a90","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a5a978a-66cb-441b-8900-99c53591fafb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9fb72522-c9eb-4e20-8d53-e45e75729733"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/546184804f6f"]}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75836832-c9dd-4a0e-b8da-84d204382a90","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/546184804f6f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9fb72522-c9eb-4e20-8d53-e45e75729733"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a5a978a-66cb-441b-8900-99c53591fafb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75836832-c9dd-4a0e-b8da-84d204382a90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75836832-c9dd-4a0e-b8da-84d204382a90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75836832-c9dd-4a0e-b8da-84d204382a90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4bc178/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75836832-c9dd-4a0e-b8da-84d204382a90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75836832-c9dd-4a0e-b8da-84d204382a90","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75836832-c9dd-4a0e-b8da-84d204382a90","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75836832-c9dd-4a0e-b8da-84d204382a90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75836832-c9dd-4a0e-b8da-84d204382a90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a777940-5c06-4f07-a157-beb32a01b35a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48766","PortSpecifier":{"PortValue":48766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a777940-5c06-4f07-a157-beb32a01b35a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ccd7ab.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a777940-5c06-4f07-a157-beb32a01b35a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48766","PortSpecifier":{"PortValue":48766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475406,"nanos":341610408},"http":{"id":"7a777940-5c06-4f07-a157-beb32a01b35a","method":"POST","headers":{":authority":"e2e-shared-b-ccd7ab.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a777940-5c06-4f07-a157-beb32a01b35a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a777940-5c06-4f07-a157-beb32a01b35a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a5a978a-66cb-441b-8900-99c53591fafb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9fb72522-c9eb-4e20-8d53-e45e75729733"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/546184804f6f"]}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a777940-5c06-4f07-a157-beb32a01b35a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/546184804f6f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9fb72522-c9eb-4e20-8d53-e45e75729733"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a5a978a-66cb-441b-8900-99c53591fafb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af70c7ec786bd389cafbc6bea5413fe5126841149e577cabd6bce30adf40beb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ccd7ab.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a777940-5c06-4f07-a157-beb32a01b35a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a777940-5c06-4f07-a157-beb32a01b35a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a777940-5c06-4f07-a157-beb32a01b35a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ccd7ab/rate-test-model-ccd7ab\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ccd7ab/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a777940-5c06-4f07-a157-beb32a01b35a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a777940-5c06-4f07-a157-beb32a01b35a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a777940-5c06-4f07-a157-beb32a01b35a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a777940-5c06-4f07-a157-beb32a01b35a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a777940-5c06-4f07-a157-beb32a01b35a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52360","PortSpecifier":{"PortValue":52360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","method":"POST","path":"/ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178/v1/completions","host":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52360","PortSpecifier":{"PortValue":52360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475406,"nanos":378057185},"http":{"id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","method":"POST","headers":{":authority":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eaJM9mlJzBaOSvcC_293kkE813PNUr1xMviURZHuYhJXZQf3fc73XgvcRMQs"}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eaJM9mlJzBaOSvcC_293kkE813PNUr1xMviURZHuYhJXZQf3fc73XgvcRMQs\"}"}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d24c130-5761-44f6-a7ad-bd2338d75cef","keyName":"e2e-rate-a-253204","subscription":"e2e-rate-iso-a-253204","tenant":"e2e-shared-a-4bc178","userId":"6d24c130-5761-44f6-a7ad-bd2338d75cef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\",\"requestedSubscription\":\"e2e-rate-iso-a-253204\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4bc178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-253204","namespace":"ai-tenant-e2e-shared-a-4bc178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178"}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4bc178/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-253204"}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d24c130-5761-44f6-a7ad-bd2338d75cef","keyName":"e2e-rate-a-253204","selected_subscription":"e2e-rate-iso-a-253204","selected_subscription_key":"ai-tenant-e2e-shared-a-4bc178/e2e-rate-iso-a-253204@ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4bc178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-253204","namespace":"ai-tenant-e2e-shared-a-4bc178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T15:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9acf5d3-a3cf-4ec5-9dcf-7724645be005","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52366","PortSpecifier":{"PortValue":52366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","method":"POST","path":"/ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178/v1/completions","host":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52366","PortSpecifier":{"PortValue":52366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475407,"nanos":419993324},"http":{"id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","method":"POST","headers":{":authority":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eaJM9mlJzBaOSvcC_293kkE813PNUr1xMviURZHuYhJXZQf3fc73XgvcRMQs"}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eaJM9mlJzBaOSvcC_293kkE813PNUr1xMviURZHuYhJXZQf3fc73XgvcRMQs\"}"}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d24c130-5761-44f6-a7ad-bd2338d75cef","keyName":"e2e-rate-a-253204","subscription":"e2e-rate-iso-a-253204","tenant":"e2e-shared-a-4bc178","userId":"6d24c130-5761-44f6-a7ad-bd2338d75cef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\",\"requestedSubscription\":\"e2e-rate-iso-a-253204\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4bc178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-253204","namespace":"ai-tenant-e2e-shared-a-4bc178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178"}}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4bc178/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-253204"}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d24c130-5761-44f6-a7ad-bd2338d75cef","keyName":"e2e-rate-a-253204","selected_subscription":"e2e-rate-iso-a-253204","selected_subscription_key":"ai-tenant-e2e-shared-a-4bc178/e2e-rate-iso-a-253204@ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4bc178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-253204","namespace":"ai-tenant-e2e-shared-a-4bc178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T15:36:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e5cca61-7f90-453e-bb2b-d3f78c3b4d14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52378","PortSpecifier":{"PortValue":52378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","method":"POST","path":"/ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178/v1/completions","host":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52378","PortSpecifier":{"PortValue":52378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475408,"nanos":463842916},"http":{"id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","method":"POST","headers":{":authority":"e2e-shared-a-4bc178.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eaJM9mlJzBaOSvcC_293kkE813PNUr1xMviURZHuYhJXZQf3fc73XgvcRMQs"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eaJM9mlJzBaOSvcC_293kkE813PNUr1xMviURZHuYhJXZQf3fc73XgvcRMQs\"}"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d24c130-5761-44f6-a7ad-bd2338d75cef","keyName":"e2e-rate-a-253204","subscription":"e2e-rate-iso-a-253204","tenant":"e2e-shared-a-4bc178","userId":"6d24c130-5761-44f6-a7ad-bd2338d75cef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\",\"requestedSubscription\":\"e2e-rate-iso-a-253204\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4bc178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4bc178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-253204","namespace":"ai-tenant-e2e-shared-a-4bc178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178"}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4bc178/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-253204"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d24c130-5761-44f6-a7ad-bd2338d75cef","keyName":"e2e-rate-a-253204","selected_subscription":"e2e-rate-iso-a-253204","selected_subscription_key":"ai-tenant-e2e-shared-a-4bc178/e2e-rate-iso-a-253204@ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4bc178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-253204","namespace":"ai-tenant-e2e-shared-a-4bc178","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4bc178/rate-test-model-4bc178"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97ac16f2-6f28-4006-b49c-a689b99ccd29","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48770","PortSpecifier":{"PortValue":48770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c422aef1-5cdc-44f9-a805-7127d6f48153","method":"POST","path":"/ai-tenant-e2e-shared-b-ccd7ab/rate-test-model-ccd7ab/v1/completions","host":"e2e-shared-b-ccd7ab.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48770","PortSpecifier":{"PortValue":48770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784475408,"nanos":500241889},"http":{"id":"c422aef1-5cdc-44f9-a805-7127d6f48153","method":"POST","headers":{":authority":"e2e-shared-b-ccd7ab.apps.c166a73c-f184-4a3d-931d-546184804f6f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ccd7ab/rate-test-model-ccd7ab/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YiahFdXSpKIabH1b_6H1kOcKZXLEhiDOJQKPid8VAqJcCmKmdt6QoZzvr5BD"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ccd7ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YiahFdXSpKIabH1b_6H1kOcKZXLEhiDOJQKPid8VAqJcCmKmdt6QoZzvr5BD\"}"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ccd7ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"337d67e4-f5cb-4698-94fb-3ff16071c2ab","keyName":"e2e-rate-b-253204","subscription":"e2e-rate-iso-b-253204","tenant":"e2e-shared-b-ccd7ab","userId":"337d67e4-f5cb-4698-94fb-3ff16071c2ab","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ccd7ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ccd7ab/rate-test-model-ccd7ab\",\"requestedSubscription\":\"e2e-rate-iso-b-253204\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ccd7ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ccd7ab","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-253204","namespace":"ai-tenant-e2e-shared-b-ccd7ab","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-ccd7ab/rate-test-model-ccd7ab"}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ccd7ab/rate-test-model-ccd7ab\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ccd7ab/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-253204"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"337d67e4-f5cb-4698-94fb-3ff16071c2ab","keyName":"e2e-rate-b-253204","selected_subscription":"e2e-rate-iso-b-253204","selected_subscription_key":"ai-tenant-e2e-shared-b-ccd7ab/e2e-rate-iso-b-253204@ai-tenant-e2e-shared-b-ccd7ab/rate-test-model-ccd7ab","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ccd7ab","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-253204","namespace":"ai-tenant-e2e-shared-b-ccd7ab","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-ccd7ab/rate-test-model-ccd7ab"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T15:36:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c422aef1-5cdc-44f9-a805-7127d6f48153","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eaee84c71c5594f09de39c25d97279741c4ad5fba065988fd7bc8b60d6ede357"}
{"level":"info","ts":"2026-07-19T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/627a84cccb6ce4467541d0812b14111c5125de7d54fddd92dd686043536bfbbb"}
{"level":"info","ts":"2026-07-19T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/967e95bc513f712f2e57812e0f9bf5f3dfbb58cd4d597b103fb93c84dd85b301"}
{"level":"info","ts":"2026-07-19T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/087a747bfdb6bf12850c254b468ede87a411a113c84633ab3651cf5c6998ce03"}
{"level":"info","ts":"2026-07-19T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c6a58338fb83a4f4e346bcee6f3858e09b56985a1820f12325f3ce56ca73520"}
{"level":"info","ts":"2026-07-19T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de6c029957b94cb0cde7200f91ef2886b24cf9643b1b123fc17960627cd3725b"}
{"level":"info","ts":"2026-07-19T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdda8339571f8db82aae374cb6aa882f6c374327aaf6d21f6489870e1be0e93d"}
{"level":"info","ts":"2026-07-19T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ed089a4b0fdc0e632851fd0d62e5fa40879f685525b71706dc815c78b90545d"}
{"level":"info","ts":"2026-07-19T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eefbedc20b59b67a1bb3dd743a399d3fbce69e6467a01c53cfb0137961d3a1eb"}
{"level":"info","ts":"2026-07-19T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/507a1a4eb592750c2113e2ed159d9b45e9d7fcdc1e9aaa99cf7ec061181bf3b2"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/def7dcbd8dc7fe3fcb257f5de5e6df4da7b45ee6fed3986e8f3ed6b5c4c372c6"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1772d686c1ea5d5ff34279549930235cd28e16636969addee7cbb4fc3f3739d2"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4e59f998c22e6848f2947e84183f2758c94c2702c50b00aeb440c0f4f040474"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c1100f92a4b6ceebdbdce85e9b4cb84b1531bda51c833ef1f2a9336ec79a21a"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b19c708a8f5897e24fb3e9057e19ba675e14750c0bb4740ce1afdca80ff3ea3c"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68d83dde7ce469e4d2b497d7a5a3d073b0d3672c7a965aa1d73356b52d564bd5"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e4ee36e59d4dcb1d18009f15900018a359ae841939f59e6cf8222b134739c45"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d6c248655860b7c5668f0070d3e3451b6777353322bc73fc009ca54d131f66d"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af70c7ec786bd389cafbc6bea5413fe5126841149e577cabd6bce30adf40beb0"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca64c95555eeab91d28a35bdda75e101df0d1470c6349167c98119422909cc82"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3e1a661b6440f87097bf02f48e81396055038d60ab142a1113d5a5a245dccc1"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcf47fbda87ee19dfdde87867978a8ad14aa97c98223c57c87c5c40f4278e36b"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/357fb861e10418e6e9818cdbc68d109a7079f10cc6991fbaefc51204c9450832"}
{"level":"info","ts":"2026-07-19T15:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5ba3602a757a6b7ccf85b6bae07cfb7eb3a6e282f055050ad09e3a993016022"}