{"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"}
{"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"}
{"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"}
{"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"}
{"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"}
{"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"}
{"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"}
{"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2"}
{"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"}
{"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"}
{"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477"}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c"}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"}
{"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101"}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef"}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9"}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94"}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18"}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e"}
{"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197"}
{"level":"info","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41456","PortSpecifier":{"PortValue":41456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41456","PortSpecifier":{"PortValue":41456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560843,"nanos":87785654},"http":{"id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36360","PortSpecifier":{"PortValue":36360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36360","PortSpecifier":{"PortValue":36360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560843,"nanos":125969419},"http":{"id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41466","PortSpecifier":{"PortValue":41466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","method":"POST","path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41466","PortSpecifier":{"PortValue":41466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560843,"nanos":170020914},"http":{"id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AWKDLDwvb6MiUjCQ_nkIApq7rr2aCNySA8O7N7eogGe55DC7mX4p3OaBHUvV"}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AWKDLDwvb6MiUjCQ_nkIApq7rr2aCNySA8O7N7eogGe55DC7mX4p3OaBHUvV\"}"}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","keyName":"e2e-rate-a-6f62ad","subscription":"e2e-rate-iso-a-6f62ad","tenant":"e2e-shared-a-88a238","userId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\",\"requestedSubscription\":\"e2e-rate-iso-a-6f62ad\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6f62ad","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6f62ad"}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","keyName":"e2e-rate-a-6f62ad","selected_subscription":"e2e-rate-iso-a-6f62ad","selected_subscription_key":"ai-tenant-e2e-shared-a-88a238/e2e-rate-iso-a-6f62ad@ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6f62ad","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41468","PortSpecifier":{"PortValue":41468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","method":"POST","path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41468","PortSpecifier":{"PortValue":41468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560844,"nanos":233108373},"http":{"id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AWKDLDwvb6MiUjCQ_nkIApq7rr2aCNySA8O7N7eogGe55DC7mX4p3OaBHUvV"}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AWKDLDwvb6MiUjCQ_nkIApq7rr2aCNySA8O7N7eogGe55DC7mX4p3OaBHUvV\"}"}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","keyName":"e2e-rate-a-6f62ad","subscription":"e2e-rate-iso-a-6f62ad","tenant":"e2e-shared-a-88a238","userId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\",\"requestedSubscription\":\"e2e-rate-iso-a-6f62ad\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6f62ad","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6f62ad"}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","keyName":"e2e-rate-a-6f62ad","selected_subscription":"e2e-rate-iso-a-6f62ad","selected_subscription_key":"ai-tenant-e2e-shared-a-88a238/e2e-rate-iso-a-6f62ad@ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6f62ad","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41484","PortSpecifier":{"PortValue":41484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","method":"POST","path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41484","PortSpecifier":{"PortValue":41484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560845,"nanos":275000594},"http":{"id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AWKDLDwvb6MiUjCQ_nkIApq7rr2aCNySA8O7N7eogGe55DC7mX4p3OaBHUvV"}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AWKDLDwvb6MiUjCQ_nkIApq7rr2aCNySA8O7N7eogGe55DC7mX4p3OaBHUvV\"}"}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","keyName":"e2e-rate-a-6f62ad","subscription":"e2e-rate-iso-a-6f62ad","tenant":"e2e-shared-a-88a238","userId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\",\"requestedSubscription\":\"e2e-rate-iso-a-6f62ad\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6f62ad","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6f62ad"}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","keyName":"e2e-rate-a-6f62ad","selected_subscription":"e2e-rate-iso-a-6f62ad","selected_subscription_key":"ai-tenant-e2e-shared-a-88a238/e2e-rate-iso-a-6f62ad@ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6f62ad","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"768d6414-bb4d-4f52-9272-1d7445250231","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48222","PortSpecifier":{"PortValue":48222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"768d6414-bb4d-4f52-9272-1d7445250231","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"768d6414-bb4d-4f52-9272-1d7445250231","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48222","PortSpecifier":{"PortValue":48222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560864,"nanos":458451631},"http":{"id":"768d6414-bb4d-4f52-9272-1d7445250231","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"768d6414-bb4d-4f52-9272-1d7445250231","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"768d6414-bb4d-4f52-9272-1d7445250231","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"768d6414-bb4d-4f52-9272-1d7445250231","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"768d6414-bb4d-4f52-9272-1d7445250231","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40460","PortSpecifier":{"PortValue":40460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40460","PortSpecifier":{"PortValue":40460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560864,"nanos":499571518},"http":{"id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48232","PortSpecifier":{"PortValue":48232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","method":"POST","path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48232","PortSpecifier":{"PortValue":48232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560864,"nanos":537670387},"http":{"id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SFpDB0qIya5DcGOW_SHNkFWqeGUK32utjQAwTkugaLrCMKrk4XEGEDcVSm13"}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SFpDB0qIya5DcGOW_SHNkFWqeGUK32utjQAwTkugaLrCMKrk4XEGEDcVSm13\"}"}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"15f53630-1d85-4cdf-9350-0d3161f764ba","keyName":"e2e-rate-a-d4ba1f","subscription":"e2e-rate-iso-a-d4ba1f","tenant":"e2e-shared-a-88a238","userId":"15f53630-1d85-4cdf-9350-0d3161f764ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\",\"requestedSubscription\":\"e2e-rate-iso-a-d4ba1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4ba1f","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4ba1f"}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"15f53630-1d85-4cdf-9350-0d3161f764ba","keyName":"e2e-rate-a-d4ba1f","selected_subscription":"e2e-rate-iso-a-d4ba1f","selected_subscription_key":"ai-tenant-e2e-shared-a-88a238/e2e-rate-iso-a-d4ba1f@ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4ba1f","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48248","PortSpecifier":{"PortValue":48248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"720d8479-ffd1-4650-bed8-676af64a73d4","method":"POST","path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48248","PortSpecifier":{"PortValue":48248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560865,"nanos":576910351},"http":{"id":"720d8479-ffd1-4650-bed8-676af64a73d4","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SFpDB0qIya5DcGOW_SHNkFWqeGUK32utjQAwTkugaLrCMKrk4XEGEDcVSm13"}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SFpDB0qIya5DcGOW_SHNkFWqeGUK32utjQAwTkugaLrCMKrk4XEGEDcVSm13\"}"}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"15f53630-1d85-4cdf-9350-0d3161f764ba","keyName":"e2e-rate-a-d4ba1f","subscription":"e2e-rate-iso-a-d4ba1f","tenant":"e2e-shared-a-88a238","userId":"15f53630-1d85-4cdf-9350-0d3161f764ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\",\"requestedSubscription\":\"e2e-rate-iso-a-d4ba1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4ba1f","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4ba1f"}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"15f53630-1d85-4cdf-9350-0d3161f764ba","keyName":"e2e-rate-a-d4ba1f","selected_subscription":"e2e-rate-iso-a-d4ba1f","selected_subscription_key":"ai-tenant-e2e-shared-a-88a238/e2e-rate-iso-a-d4ba1f@ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4ba1f","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48264","PortSpecifier":{"PortValue":48264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","method":"POST","path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48264","PortSpecifier":{"PortValue":48264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560866,"nanos":637012408},"http":{"id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SFpDB0qIya5DcGOW_SHNkFWqeGUK32utjQAwTkugaLrCMKrk4XEGEDcVSm13"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SFpDB0qIya5DcGOW_SHNkFWqeGUK32utjQAwTkugaLrCMKrk4XEGEDcVSm13\"}"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"15f53630-1d85-4cdf-9350-0d3161f764ba","keyName":"e2e-rate-a-d4ba1f","subscription":"e2e-rate-iso-a-d4ba1f","tenant":"e2e-shared-a-88a238","userId":"15f53630-1d85-4cdf-9350-0d3161f764ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\",\"requestedSubscription\":\"e2e-rate-iso-a-d4ba1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4ba1f","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4ba1f"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"15f53630-1d85-4cdf-9350-0d3161f764ba","keyName":"e2e-rate-a-d4ba1f","selected_subscription":"e2e-rate-iso-a-d4ba1f","selected_subscription_key":"ai-tenant-e2e-shared-a-88a238/e2e-rate-iso-a-d4ba1f@ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4ba1f","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40462","PortSpecifier":{"PortValue":40462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","method":"POST","path":"/ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242/v1/completions","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40462","PortSpecifier":{"PortValue":40462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560866,"nanos":689798042},"http":{"id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XXFzDtjDBcMBqhk3_eDJy1VbheVwvFRITRSnqgDCD4uZ6PRgRn81AL7AbDVP"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XXFzDtjDBcMBqhk3_eDJy1VbheVwvFRITRSnqgDCD4uZ6PRgRn81AL7AbDVP\"}"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2832ee9-c53b-4bf9-9918-753904d4789d","keyName":"e2e-rate-b-d4ba1f","subscription":"e2e-rate-iso-b-d4ba1f","tenant":"e2e-shared-b-52d242","userId":"b2832ee9-c53b-4bf9-9918-753904d4789d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242\",\"requestedSubscription\":\"e2e-rate-iso-b-d4ba1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-52d242","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d4ba1f","namespace":"ai-tenant-e2e-shared-b-52d242","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d4ba1f"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2832ee9-c53b-4bf9-9918-753904d4789d","keyName":"e2e-rate-b-d4ba1f","selected_subscription":"e2e-rate-iso-b-d4ba1f","selected_subscription_key":"ai-tenant-e2e-shared-b-52d242/e2e-rate-iso-b-d4ba1f@ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-52d242","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d4ba1f","namespace":"ai-tenant-e2e-shared-b-52d242","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101"}
{"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e"}
{"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"}
{"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"}
{"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"}
{"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef"}
{"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"}
{"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94"}
{"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"}
{"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"}
{"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2"}
{"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"}
{"level":"info","ts":"2026-07-09T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477"}
{"level":"info","ts":"2026-07-09T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"}
{"level":"info","ts":"2026-07-09T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c"}
{"level":"info","ts":"2026-07-09T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"}
{"level":"info","ts":"2026-07-09T01:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197"}
{"level":"info","ts":"2026-07-09T01:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1"}
{"level":"info","ts":"2026-07-09T01:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"}
{"level":"info","ts":"2026-07-09T01:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"}
{"level":"info","ts":"2026-07-09T01:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"}
{"level":"info","ts":"2026-07-09T01:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9"}
{"level":"info","ts":"2026-07-09T01:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"}
{"level":"info","ts":"2026-07-09T01:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18"}