{"level":"info","ts":"2026-07-21T21:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"}
{"level":"info","ts":"2026-07-21T21:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c306a4394db5717cb7b64a8a8ceaca633bc06c40cd2a117767b6b0c3b3df55e2"}
{"level":"info","ts":"2026-07-21T21:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33f1ad4f2ef43d5f9241811daa3eb4eb9b5fa1a3debe356c1831fceca5deb4aa"}
{"level":"info","ts":"2026-07-21T21:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f03a0bba15ebdbf6721fa162ce1617d20a9d336245ae04f20b8618029ab69f3"}
{"level":"info","ts":"2026-07-21T21:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4b6d7e63d11bd2731c07a64ef86ead65f0a8dcf30ff17802e5d076486fc2d67"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13a0f27e73d185c316b7a3ab4abb61b0bb70f385ed29dcd05740d0b0d4a05d0e"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b45714d86c77f4d29f719282c31caa362a37afaae19612a058ee62991230ea00"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ad466a8fa96de40693cf548fe488a30a774931f2aea3b075a270473f2ccdbd4"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0d00bf27a0720be30055834ff85c8d3c2fb2068324709a171d39a1f6ec91829"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2a04e1b5a668c94a2687d6da3ec85f84227ecf68066407183ecb73f3440dcaa"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/542cf0d624c88f222a63ab2b4d0814eb9e34862aaff1af9bd34588e571d897d4"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b604752149d3b93d9821d8a9a6285e83304b8eeb87648e5b47c1b4ac6ffb696"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe58bd18cd1df182b4f86cbe27e95df5df5a5d1d25446d5a937e701aaf7310cd"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b880da74b7106004b674478d2c7a1b28013209e6276338910b8e1c145772577d"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/387bce9c37cc40ae3be9f19a3f66c7d37fa7f10be37303bd972c9abf14b4dccf"}
{"level":"info","ts":"2026-07-21T21:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e"}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e"}
{"level":"error","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87"}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e"}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a"}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"}
{"level":"info","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T21:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T21:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"}
{"level":"info","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48782","PortSpecifier":{"PortValue":48782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48782","PortSpecifier":{"PortValue":48782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669131,"nanos":625468278},"http":{"id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d973d02-0f3c-4c29-8524-6668766a7cb9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39124","PortSpecifier":{"PortValue":39124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39124","PortSpecifier":{"PortValue":39124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669131,"nanos":666727169},"http":{"id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d01401f-cdc9-4f4f-9dca-266c4e90506d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48794","PortSpecifier":{"PortValue":48794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","method":"POST","path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48794","PortSpecifier":{"PortValue":48794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669131,"nanos":703337517},"http":{"id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Crb4NQdUqmS54cRj_yeeWCGJta7AJ7BGvo5aXSPzOCyPHE357hwbAnjFnLSm"}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Crb4NQdUqmS54cRj_yeeWCGJta7AJ7BGvo5aXSPzOCyPHE357hwbAnjFnLSm\"}"}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","keyName":"e2e-rate-a-ca320d","subscription":"e2e-rate-iso-a-ca320d","tenant":"e2e-shared-a-0c5ebd","userId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\",\"requestedSubscription\":\"e2e-rate-iso-a-ca320d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca320d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca320d"}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","keyName":"e2e-rate-a-ca320d","selected_subscription":"e2e-rate-iso-a-ca320d","selected_subscription_key":"ai-tenant-e2e-shared-a-0c5ebd/e2e-rate-iso-a-ca320d@ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca320d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:25:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f815772-c76a-4a6d-a43e-4ff9ff78e890","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f26e9d95-4723-441c-9808-56b838b185b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48800","PortSpecifier":{"PortValue":48800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f26e9d95-4723-441c-9808-56b838b185b7","method":"POST","path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f26e9d95-4723-441c-9808-56b838b185b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48800","PortSpecifier":{"PortValue":48800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669132,"nanos":754621091},"http":{"id":"f26e9d95-4723-441c-9808-56b838b185b7","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Crb4NQdUqmS54cRj_yeeWCGJta7AJ7BGvo5aXSPzOCyPHE357hwbAnjFnLSm"}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Crb4NQdUqmS54cRj_yeeWCGJta7AJ7BGvo5aXSPzOCyPHE357hwbAnjFnLSm\"}"}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","keyName":"e2e-rate-a-ca320d","subscription":"e2e-rate-iso-a-ca320d","tenant":"e2e-shared-a-0c5ebd","userId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\",\"requestedSubscription\":\"e2e-rate-iso-a-ca320d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca320d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"}}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f26e9d95-4723-441c-9808-56b838b185b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca320d"}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f26e9d95-4723-441c-9808-56b838b185b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","keyName":"e2e-rate-a-ca320d","selected_subscription":"e2e-rate-iso-a-ca320d","selected_subscription_key":"ai-tenant-e2e-shared-a-0c5ebd/e2e-rate-iso-a-ca320d@ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca320d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f26e9d95-4723-441c-9808-56b838b185b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f26e9d95-4723-441c-9808-56b838b185b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49950","PortSpecifier":{"PortValue":49950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","method":"POST","path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49950","PortSpecifier":{"PortValue":49950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669133,"nanos":794971364},"http":{"id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Crb4NQdUqmS54cRj_yeeWCGJta7AJ7BGvo5aXSPzOCyPHE357hwbAnjFnLSm"}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Crb4NQdUqmS54cRj_yeeWCGJta7AJ7BGvo5aXSPzOCyPHE357hwbAnjFnLSm\"}"}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","keyName":"e2e-rate-a-ca320d","subscription":"e2e-rate-iso-a-ca320d","tenant":"e2e-shared-a-0c5ebd","userId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\",\"requestedSubscription\":\"e2e-rate-iso-a-ca320d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca320d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"}}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca320d"}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8b3ca8c3-0db3-48c9-849a-884ac27552cf","keyName":"e2e-rate-a-ca320d","selected_subscription":"e2e-rate-iso-a-ca320d","selected_subscription_key":"ai-tenant-e2e-shared-a-0c5ebd/e2e-rate-iso-a-ca320d@ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca320d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:25:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61d90148-cd8a-4292-a7ea-5cd7fe8a37d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51608","PortSpecifier":{"PortValue":51608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0aed34bb-72cd-4923-b109-9fa5d4817653","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51608","PortSpecifier":{"PortValue":51608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669146,"nanos":813582740},"http":{"id":"0aed34bb-72cd-4923-b109-9fa5d4817653","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0aed34bb-72cd-4923-b109-9fa5d4817653","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44676","PortSpecifier":{"PortValue":44676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44676","PortSpecifier":{"PortValue":44676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669146,"nanos":852693164},"http":{"id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"]}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/62bbd38aeb07"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30968e5d-1009-4aba-8d14-53556b602915"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"79618354-5b6d-4506-8fb9-6c79fdcf4313","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07a67dbb-4ede-487f-9a12-9ff2158b4d3b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51616","PortSpecifier":{"PortValue":51616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","method":"POST","path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51616","PortSpecifier":{"PortValue":51616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669146,"nanos":892886889},"http":{"id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-plC2pjRcgGHxxsom_HVjfFHDk9RU02pLD5TFGGkTjAj3SQPyWgKXGhFTUp0R"}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-plC2pjRcgGHxxsom_HVjfFHDk9RU02pLD5TFGGkTjAj3SQPyWgKXGhFTUp0R\"}"}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62f119a3-0609-4264-b623-22f3c956759c","keyName":"e2e-rate-a-90242d","subscription":"e2e-rate-iso-a-90242d","tenant":"e2e-shared-a-0c5ebd","userId":"62f119a3-0609-4264-b623-22f3c956759c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\",\"requestedSubscription\":\"e2e-rate-iso-a-90242d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90242d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90242d"}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62f119a3-0609-4264-b623-22f3c956759c","keyName":"e2e-rate-a-90242d","selected_subscription":"e2e-rate-iso-a-90242d","selected_subscription_key":"ai-tenant-e2e-shared-a-0c5ebd/e2e-rate-iso-a-90242d@ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90242d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:25:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526dd1d2-36ae-4c8f-bd31-8b096c6715f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51622","PortSpecifier":{"PortValue":51622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","method":"POST","path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51622","PortSpecifier":{"PortValue":51622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669147,"nanos":958971551},"http":{"id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-plC2pjRcgGHxxsom_HVjfFHDk9RU02pLD5TFGGkTjAj3SQPyWgKXGhFTUp0R"}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-plC2pjRcgGHxxsom_HVjfFHDk9RU02pLD5TFGGkTjAj3SQPyWgKXGhFTUp0R\"}"}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62f119a3-0609-4264-b623-22f3c956759c","keyName":"e2e-rate-a-90242d","subscription":"e2e-rate-iso-a-90242d","tenant":"e2e-shared-a-0c5ebd","userId":"62f119a3-0609-4264-b623-22f3c956759c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\",\"requestedSubscription\":\"e2e-rate-iso-a-90242d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90242d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"}}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90242d"}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62f119a3-0609-4264-b623-22f3c956759c","keyName":"e2e-rate-a-90242d","selected_subscription":"e2e-rate-iso-a-90242d","selected_subscription_key":"ai-tenant-e2e-shared-a-0c5ebd/e2e-rate-iso-a-90242d@ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90242d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83e3d1bc-82a1-411d-848f-8c7f3981c9be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51636","PortSpecifier":{"PortValue":51636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","method":"POST","path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions","host":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51636","PortSpecifier":{"PortValue":51636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669148,"nanos":997310024},"http":{"id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","method":"POST","headers":{":authority":"e2e-shared-a-0c5ebd.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-plC2pjRcgGHxxsom_HVjfFHDk9RU02pLD5TFGGkTjAj3SQPyWgKXGhFTUp0R"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-plC2pjRcgGHxxsom_HVjfFHDk9RU02pLD5TFGGkTjAj3SQPyWgKXGhFTUp0R\"}"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62f119a3-0609-4264-b623-22f3c956759c","keyName":"e2e-rate-a-90242d","subscription":"e2e-rate-iso-a-90242d","tenant":"e2e-shared-a-0c5ebd","userId":"62f119a3-0609-4264-b623-22f3c956759c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\",\"requestedSubscription\":\"e2e-rate-iso-a-90242d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0c5ebd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90242d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"}}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0c5ebd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90242d"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62f119a3-0609-4264-b623-22f3c956759c","keyName":"e2e-rate-a-90242d","selected_subscription":"e2e-rate-iso-a-90242d","selected_subscription_key":"ai-tenant-e2e-shared-a-0c5ebd/e2e-rate-iso-a-90242d@ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0c5ebd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90242d","namespace":"ai-tenant-e2e-shared-a-0c5ebd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0c5ebd/rate-test-model-0c5ebd"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d3b78f8-4de8-4079-8139-09f4cc89e66d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44686","PortSpecifier":{"PortValue":44686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","method":"POST","path":"/ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec/v1/completions","host":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44686","PortSpecifier":{"PortValue":44686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784669149,"nanos":34916730},"http":{"id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","method":"POST","headers":{":authority":"e2e-shared-b-80e9ec.apps.dabea0bc-14df-421e-8fbe-62bbd38aeb07.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17TCxQ0VV2kdEGOiS_PFSpMVqxSAeZ8Lx3iSlrZ3mbsmrugiOOblFUhGL8X3W"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17TCxQ0VV2kdEGOiS_PFSpMVqxSAeZ8Lx3iSlrZ3mbsmrugiOOblFUhGL8X3W\"}"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"caa94eae-eb3c-4834-8064-ebac00efe254","keyName":"e2e-rate-b-90242d","subscription":"e2e-rate-iso-b-90242d","tenant":"e2e-shared-b-80e9ec","userId":"caa94eae-eb3c-4834-8064-ebac00efe254","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec\",\"requestedSubscription\":\"e2e-rate-iso-b-90242d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-80e9ec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-80e9ec","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-90242d","namespace":"ai-tenant-e2e-shared-b-80e9ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec"}}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-80e9ec/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-90242d"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"caa94eae-eb3c-4834-8064-ebac00efe254","keyName":"e2e-rate-b-90242d","selected_subscription":"e2e-rate-iso-b-90242d","selected_subscription_key":"ai-tenant-e2e-shared-b-80e9ec/e2e-rate-iso-b-90242d@ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-80e9ec","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-90242d","namespace":"ai-tenant-e2e-shared-b-80e9ec","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-80e9ec/rate-test-model-80e9ec"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T21:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8109eba4-638a-4cb3-97cd-49dd1ccb5808","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acd4ae04ef83118d897f75ee928a881f9eaba2d729cfd0db1a5a049aaab9b0e2"}
{"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f44fe17c2f30db5eca87de5defe293e89253c7d753561d9ab250f42a47952c0b"}
{"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1823215b0d425989544f79cf221a9906c8594130fb530717c31667705762f4db"}
{"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adffe242e1b69acd846a17298f8ef1ac29ea636536d583f45d6171e27c58e1c7"}
{"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f1645b0af1a384e6db7ea57218831515f7b20cfa4fdf98835c7fd4fef2fcfa5"}
{"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ab097520fa0322bb8afd380898492521b43da1844d3c7fa7610e2e76de395d3"}
{"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1749a7afab003665ff4ff0926f6965a81ee7522ebe7ca6d92d2380af6cda0e87"}
{"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7443d36ec820ee514b59f1a9a4aa0769130c7c0b5862352d4acd30ef49dc50c"}
{"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7edbc9cf6c227a794cd8c548f2ead1b8750b19052d8bcc0b4e0e28e58d6f0e0"}
{"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7f5310dba4af20fc29aba4a68f0b960961cd65c8bc9c605e3059209a536b9dc"}
{"level":"info","ts":"2026-07-21T21:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/217a3621ef7539b366a1531c7cbbfd737a09a437c31819c52e25596fa1bb1ffe"}
{"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ae17bb96d3e8494eeaccc161c9e21620e3a519f1252468a30073fa03467241c"}
{"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/175330ca21613ed2fe52eced369da648f3eb142fa137c3cb18060adea5ed4c6e"}
{"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fbad9632ef33617e65b83704e77b546b93c83c1371fe88d0f721a879bb74e84"}
{"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45d1cf9d85a7cb165ef32e413408ee7d72322079df812dd925fd3e401ab97103"}
{"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/530fb3a5b0e31a18d0e19713eeac6fe9943049e6895aeeb626cfdd0e1817265b"}
{"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f76e62154224d32dbe8e07bfb9e0c4e3a3d709dcbe5378afe9fbe5d01720fbf5"}
{"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91659e06865d7cc7c7fb7f8047ae6e0a436c903bfee6168fd20c74703987ca1e"}
{"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd6c7f691e0ee45bfef4a6aac7cb5b44d0aba1c1b6f294d10afcac5d438ac11e"}
{"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f069e3a0e3257776d31529b88a9ac523478e6b222558872a7c077e032069782"}
{"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f696053eb3e5a74fa1238d09c7a45da581ff4776f8abf87788c1705bf0b780b"}
{"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c9292cfead04386444d86a594fa0e6d4c5c7d2724e6865de6f4df364d62d3e9"}
{"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec180b2a74ba33aac9dd563f7144b96d3786ac94e23f43cc92ca35edd5c726b4"}
{"level":"info","ts":"2026-07-21T21:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca545c92d41762dc46153349d3847470064c6a5c607301e4cc7b336133463b0a"}