{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43472f0af7fb8e0299e7aa1176aa3f5a65586ab9d7437b466ed692ba68101316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43472f0af7fb8e0299e7aa1176aa3f5a65586ab9d7437b466ed692ba68101316"}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828"}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5bdf90e344193575dfa57a92f8f45be13a229d0b95353fbc2aba58d0a9aab25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5bdf90e344193575dfa57a92f8f45be13a229d0b95353fbc2aba58d0a9aab25"}
{"level":"debug","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7"}
{"level":"debug","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd"}
{"level":"debug","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e"}
{"level":"debug","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b280e985452d2dd74b50764bd33403392b93f8a6a381dc66639df61ad373284","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b280e985452d2dd74b50764bd33403392b93f8a6a381dc66639df61ad373284"}
{"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60246","PortSpecifier":{"PortValue":60246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adb5128c-afed-4381-ae89-8b2f5e785529","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60246","PortSpecifier":{"PortValue":60246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368458,"nanos":415410303},"http":{"id":"adb5128c-afed-4381-ae89-8b2f5e785529","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40210","PortSpecifier":{"PortValue":40210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40210","PortSpecifier":{"PortValue":40210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368458,"nanos":460671636},"http":{"id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60248","PortSpecifier":{"PortValue":60248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","method":"POST","path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60248","PortSpecifier":{"PortValue":60248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368458,"nanos":505853709},"http":{"id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UAGehOWgybFvapO6_BCp3WYkP95SHvUMuy7SAr6glF5rcCi3VDyYPngbNy8x"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UAGehOWgybFvapO6_BCp3WYkP95SHvUMuy7SAr6glF5rcCi3VDyYPngbNy8x\"}"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e20a9a24-7016-428a-9adb-bec177f49d8e","keyName":"e2e-rate-a-526796","subscription":"e2e-rate-iso-a-526796","tenant":"e2e-shared-a-cd90ec","userId":"e20a9a24-7016-428a-9adb-bec177f49d8e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\",\"requestedSubscription\":\"e2e-rate-iso-a-526796\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-526796","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-526796"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e20a9a24-7016-428a-9adb-bec177f49d8e","keyName":"e2e-rate-a-526796","selected_subscription":"e2e-rate-iso-a-526796","selected_subscription_key":"ai-tenant-e2e-shared-a-cd90ec/e2e-rate-iso-a-526796@ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-526796","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57468","PortSpecifier":{"PortValue":57468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","method":"POST","path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57468","PortSpecifier":{"PortValue":57468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368459,"nanos":575240283},"http":{"id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UAGehOWgybFvapO6_BCp3WYkP95SHvUMuy7SAr6glF5rcCi3VDyYPngbNy8x"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UAGehOWgybFvapO6_BCp3WYkP95SHvUMuy7SAr6glF5rcCi3VDyYPngbNy8x\"}"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e20a9a24-7016-428a-9adb-bec177f49d8e","keyName":"e2e-rate-a-526796","subscription":"e2e-rate-iso-a-526796","tenant":"e2e-shared-a-cd90ec","userId":"e20a9a24-7016-428a-9adb-bec177f49d8e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\",\"requestedSubscription\":\"e2e-rate-iso-a-526796\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-526796","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-526796"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e20a9a24-7016-428a-9adb-bec177f49d8e","keyName":"e2e-rate-a-526796","selected_subscription":"e2e-rate-iso-a-526796","selected_subscription_key":"ai-tenant-e2e-shared-a-cd90ec/e2e-rate-iso-a-526796@ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-526796","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57476","PortSpecifier":{"PortValue":57476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","method":"POST","path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57476","PortSpecifier":{"PortValue":57476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368460,"nanos":617983525},"http":{"id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UAGehOWgybFvapO6_BCp3WYkP95SHvUMuy7SAr6glF5rcCi3VDyYPngbNy8x"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UAGehOWgybFvapO6_BCp3WYkP95SHvUMuy7SAr6glF5rcCi3VDyYPngbNy8x\"}"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e20a9a24-7016-428a-9adb-bec177f49d8e","keyName":"e2e-rate-a-526796","subscription":"e2e-rate-iso-a-526796","tenant":"e2e-shared-a-cd90ec","userId":"e20a9a24-7016-428a-9adb-bec177f49d8e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\",\"requestedSubscription\":\"e2e-rate-iso-a-526796\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-526796","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-526796"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e20a9a24-7016-428a-9adb-bec177f49d8e","keyName":"e2e-rate-a-526796","selected_subscription":"e2e-rate-iso-a-526796","selected_subscription_key":"ai-tenant-e2e-shared-a-cd90ec/e2e-rate-iso-a-526796@ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-526796","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47354","PortSpecifier":{"PortValue":47354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15db32fe-f86b-4148-b3fd-0609147b6007","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47354","PortSpecifier":{"PortValue":47354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368471,"nanos":945791397},"http":{"id":"15db32fe-f86b-4148-b3fd-0609147b6007","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37974","PortSpecifier":{"PortValue":37974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3791238e-82ea-4846-be95-f6d79df0cc6b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37974","PortSpecifier":{"PortValue":37974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368471,"nanos":992805686},"http":{"id":"3791238e-82ea-4846-be95-f6d79df0cc6b","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47360","PortSpecifier":{"PortValue":47360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","method":"POST","path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47360","PortSpecifier":{"PortValue":47360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368472,"nanos":33147745},"http":{"id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tn3MEcZgjiRqAgo8_1dez7rXsiMSjPoYb1h8oUjvQI45be65JRMKQsrw7nkc"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tn3MEcZgjiRqAgo8_1dez7rXsiMSjPoYb1h8oUjvQI45be65JRMKQsrw7nkc\"}"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"278fba3a-25c1-456c-a585-f956d1c24a88","keyName":"e2e-rate-a-726092","subscription":"e2e-rate-iso-a-726092","tenant":"e2e-shared-a-cd90ec","userId":"278fba3a-25c1-456c-a585-f956d1c24a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\",\"requestedSubscription\":\"e2e-rate-iso-a-726092\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-726092","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-726092"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"278fba3a-25c1-456c-a585-f956d1c24a88","keyName":"e2e-rate-a-726092","selected_subscription":"e2e-rate-iso-a-726092","selected_subscription_key":"ai-tenant-e2e-shared-a-cd90ec/e2e-rate-iso-a-726092@ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-726092","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47372","PortSpecifier":{"PortValue":47372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f511418-8e54-47a8-8864-ee931cbde6ec","method":"POST","path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47372","PortSpecifier":{"PortValue":47372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368473,"nanos":77272322},"http":{"id":"2f511418-8e54-47a8-8864-ee931cbde6ec","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tn3MEcZgjiRqAgo8_1dez7rXsiMSjPoYb1h8oUjvQI45be65JRMKQsrw7nkc"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tn3MEcZgjiRqAgo8_1dez7rXsiMSjPoYb1h8oUjvQI45be65JRMKQsrw7nkc\"}"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"278fba3a-25c1-456c-a585-f956d1c24a88","keyName":"e2e-rate-a-726092","subscription":"e2e-rate-iso-a-726092","tenant":"e2e-shared-a-cd90ec","userId":"278fba3a-25c1-456c-a585-f956d1c24a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\",\"requestedSubscription\":\"e2e-rate-iso-a-726092\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-726092","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-726092"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"278fba3a-25c1-456c-a585-f956d1c24a88","keyName":"e2e-rate-a-726092","selected_subscription":"e2e-rate-iso-a-726092","selected_subscription_key":"ai-tenant-e2e-shared-a-cd90ec/e2e-rate-iso-a-726092@ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-726092","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47378","PortSpecifier":{"PortValue":47378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74ce369c-eebb-404a-b328-c308b24c79a8","method":"POST","path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47378","PortSpecifier":{"PortValue":47378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368474,"nanos":117346858},"http":{"id":"74ce369c-eebb-404a-b328-c308b24c79a8","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tn3MEcZgjiRqAgo8_1dez7rXsiMSjPoYb1h8oUjvQI45be65JRMKQsrw7nkc"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tn3MEcZgjiRqAgo8_1dez7rXsiMSjPoYb1h8oUjvQI45be65JRMKQsrw7nkc\"}"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"278fba3a-25c1-456c-a585-f956d1c24a88","keyName":"e2e-rate-a-726092","subscription":"e2e-rate-iso-a-726092","tenant":"e2e-shared-a-cd90ec","userId":"278fba3a-25c1-456c-a585-f956d1c24a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\",\"requestedSubscription\":\"e2e-rate-iso-a-726092\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-726092","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-726092"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"278fba3a-25c1-456c-a585-f956d1c24a88","keyName":"e2e-rate-a-726092","selected_subscription":"e2e-rate-iso-a-726092","selected_subscription_key":"ai-tenant-e2e-shared-a-cd90ec/e2e-rate-iso-a-726092@ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-726092","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37980","PortSpecifier":{"PortValue":37980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","method":"POST","path":"/ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c/v1/completions","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37980","PortSpecifier":{"PortValue":37980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368474,"nanos":161536666},"http":{"id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-izCEnzjxLE2GNxoW_cBH4W9bvHoXd6leSszdtpRPm569T62hwN3PxTJmvxBY"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-izCEnzjxLE2GNxoW_cBH4W9bvHoXd6leSszdtpRPm569T62hwN3PxTJmvxBY\"}"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a742b6a3-7bad-483e-b33f-196e7d585864","keyName":"e2e-rate-b-726092","subscription":"e2e-rate-iso-b-726092","tenant":"e2e-shared-b-04d79c","userId":"a742b6a3-7bad-483e-b33f-196e7d585864","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c\",\"requestedSubscription\":\"e2e-rate-iso-b-726092\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-04d79c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-726092","namespace":"ai-tenant-e2e-shared-b-04d79c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-726092"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a742b6a3-7bad-483e-b33f-196e7d585864","keyName":"e2e-rate-b-726092","selected_subscription":"e2e-rate-iso-b-726092","selected_subscription_key":"ai-tenant-e2e-shared-b-04d79c/e2e-rate-iso-b-726092@ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-04d79c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-726092","namespace":"ai-tenant-e2e-shared-b-04d79c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b280e985452d2dd74b50764bd33403392b93f8a6a381dc66639df61ad373284"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5bdf90e344193575dfa57a92f8f45be13a229d0b95353fbc2aba58d0a9aab25"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43472f0af7fb8e0299e7aa1176aa3f5a65586ab9d7437b466ed692ba68101316"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795"}
{"level":"info","ts":"2026-07-06T20:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"}
{"level":"info","ts":"2026-07-06T20:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"}