{"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97"} {"level":"error","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"error","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:22:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"error","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:22:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"730d502b-708b-4877-be61-849b93114212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44162","PortSpecifier":{"PortValue":44162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"730d502b-708b-4877-be61-849b93114212","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"730d502b-708b-4877-be61-849b93114212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44162","PortSpecifier":{"PortValue":44162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686933,"nanos":424275433},"http":{"id":"730d502b-708b-4877-be61-849b93114212","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"730d502b-708b-4877-be61-849b93114212","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"730d502b-708b-4877-be61-849b93114212","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"730d502b-708b-4877-be61-849b93114212","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"730d502b-708b-4877-be61-849b93114212","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"730d502b-708b-4877-be61-849b93114212","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54844","PortSpecifier":{"PortValue":54844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c8b4275-3cfb-4265-a823-23405a0611eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54844","PortSpecifier":{"PortValue":54844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686933,"nanos":469700154},"http":{"id":"6c8b4275-3cfb-4265-a823-23405a0611eb","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c8b4275-3cfb-4265-a823-23405a0611eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44168","PortSpecifier":{"PortValue":44168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","method":"POST","path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44168","PortSpecifier":{"PortValue":44168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686933,"nanos":520095719},"http":{"id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Rvjaiglc6d8urCBd_7fx8GQkkLQtfad04cQBQgq394CjY439tgKSV5XcW7sH"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Rvjaiglc6d8urCBd_7fx8GQkkLQtfad04cQBQgq394CjY439tgKSV5XcW7sH\"}"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eed9e6df-4435-4c16-a22d-445ef8d26964","keyName":"e2e-rate-a-a979f8","subscription":"e2e-rate-iso-a-a979f8","tenant":"e2e-shared-a-eba9c8","userId":"eed9e6df-4435-4c16-a22d-445ef8d26964","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\",\"requestedSubscription\":\"e2e-rate-iso-a-a979f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a979f8","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a979f8"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"eed9e6df-4435-4c16-a22d-445ef8d26964","keyName":"e2e-rate-a-a979f8","selected_subscription":"e2e-rate-iso-a-a979f8","selected_subscription_key":"ai-tenant-e2e-shared-a-eba9c8/e2e-rate-iso-a-a979f8@ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a979f8","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc570a8f-35b3-4cf5-bb41-4e5cd59bbe30","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44174","PortSpecifier":{"PortValue":44174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","method":"POST","path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44174","PortSpecifier":{"PortValue":44174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686934,"nanos":582185033},"http":{"id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Rvjaiglc6d8urCBd_7fx8GQkkLQtfad04cQBQgq394CjY439tgKSV5XcW7sH"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Rvjaiglc6d8urCBd_7fx8GQkkLQtfad04cQBQgq394CjY439tgKSV5XcW7sH\"}"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eed9e6df-4435-4c16-a22d-445ef8d26964","keyName":"e2e-rate-a-a979f8","subscription":"e2e-rate-iso-a-a979f8","tenant":"e2e-shared-a-eba9c8","userId":"eed9e6df-4435-4c16-a22d-445ef8d26964","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\",\"requestedSubscription\":\"e2e-rate-iso-a-a979f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a979f8","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a979f8"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"eed9e6df-4435-4c16-a22d-445ef8d26964","keyName":"e2e-rate-a-a979f8","selected_subscription":"e2e-rate-iso-a-a979f8","selected_subscription_key":"ai-tenant-e2e-shared-a-eba9c8/e2e-rate-iso-a-a979f8@ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a979f8","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebe3d28b-bca8-4bfc-a101-b71598591c49","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44184","PortSpecifier":{"PortValue":44184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8493b696-3f16-4b07-8a1b-256716035cd8","method":"POST","path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44184","PortSpecifier":{"PortValue":44184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686935,"nanos":619242472},"http":{"id":"8493b696-3f16-4b07-8a1b-256716035cd8","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Rvjaiglc6d8urCBd_7fx8GQkkLQtfad04cQBQgq394CjY439tgKSV5XcW7sH"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Rvjaiglc6d8urCBd_7fx8GQkkLQtfad04cQBQgq394CjY439tgKSV5XcW7sH\"}"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eed9e6df-4435-4c16-a22d-445ef8d26964","keyName":"e2e-rate-a-a979f8","subscription":"e2e-rate-iso-a-a979f8","tenant":"e2e-shared-a-eba9c8","userId":"eed9e6df-4435-4c16-a22d-445ef8d26964","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\",\"requestedSubscription\":\"e2e-rate-iso-a-a979f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a979f8","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a979f8"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"eed9e6df-4435-4c16-a22d-445ef8d26964","keyName":"e2e-rate-a-a979f8","selected_subscription":"e2e-rate-iso-a-a979f8","selected_subscription_key":"ai-tenant-e2e-shared-a-eba9c8/e2e-rate-iso-a-a979f8@ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a979f8","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8493b696-3f16-4b07-8a1b-256716035cd8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54926","PortSpecifier":{"PortValue":54926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54926","PortSpecifier":{"PortValue":54926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686948,"nanos":708549724},"http":{"id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2f039ad-3702-47ec-9d30-d63d8321a44e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55162","PortSpecifier":{"PortValue":55162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51ab37c8-4401-4c1d-9e91-1739409771f6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55162","PortSpecifier":{"PortValue":55162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686948,"nanos":754678579},"http":{"id":"51ab37c8-4401-4c1d-9e91-1739409771f6","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"]}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/de911f4fb759"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30f13f5f-a947-4b77-9d15-3cd9f1173fc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d8c88cbb-ea36-404f-8653-16b8543618a3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51ab37c8-4401-4c1d-9e91-1739409771f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","method":"POST","path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686948,"nanos":796363337},"http":{"id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LPQtnzD5yEOndV0s_4NqOYi3eb0kkPNGSfZeosff8gX9KOauNlJ3X7Ehn6TH"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LPQtnzD5yEOndV0s_4NqOYi3eb0kkPNGSfZeosff8gX9KOauNlJ3X7Ehn6TH\"}"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","keyName":"e2e-rate-a-fc731b","subscription":"e2e-rate-iso-a-fc731b","tenant":"e2e-shared-a-eba9c8","userId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\",\"requestedSubscription\":\"e2e-rate-iso-a-fc731b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fc731b","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fc731b"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","keyName":"e2e-rate-a-fc731b","selected_subscription":"e2e-rate-iso-a-fc731b","selected_subscription_key":"ai-tenant-e2e-shared-a-eba9c8/e2e-rate-iso-a-fc731b@ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fc731b","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2c51ac0-7782-4a08-8faf-7287e6dbeef9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81780e94-0a86-4330-8550-0885e37827b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54946","PortSpecifier":{"PortValue":54946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81780e94-0a86-4330-8550-0885e37827b0","method":"POST","path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81780e94-0a86-4330-8550-0885e37827b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54946","PortSpecifier":{"PortValue":54946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686949,"nanos":832425279},"http":{"id":"81780e94-0a86-4330-8550-0885e37827b0","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LPQtnzD5yEOndV0s_4NqOYi3eb0kkPNGSfZeosff8gX9KOauNlJ3X7Ehn6TH"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LPQtnzD5yEOndV0s_4NqOYi3eb0kkPNGSfZeosff8gX9KOauNlJ3X7Ehn6TH\"}"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","keyName":"e2e-rate-a-fc731b","subscription":"e2e-rate-iso-a-fc731b","tenant":"e2e-shared-a-eba9c8","userId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\",\"requestedSubscription\":\"e2e-rate-iso-a-fc731b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fc731b","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81780e94-0a86-4330-8550-0885e37827b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fc731b"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81780e94-0a86-4330-8550-0885e37827b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","keyName":"e2e-rate-a-fc731b","selected_subscription":"e2e-rate-iso-a-fc731b","selected_subscription_key":"ai-tenant-e2e-shared-a-eba9c8/e2e-rate-iso-a-fc731b@ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fc731b","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81780e94-0a86-4330-8550-0885e37827b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81780e94-0a86-4330-8550-0885e37827b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54954","PortSpecifier":{"PortValue":54954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","method":"POST","path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions","host":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54954","PortSpecifier":{"PortValue":54954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686950,"nanos":871473706},"http":{"id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","method":"POST","headers":{":authority":"e2e-shared-a-eba9c8.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LPQtnzD5yEOndV0s_4NqOYi3eb0kkPNGSfZeosff8gX9KOauNlJ3X7Ehn6TH"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LPQtnzD5yEOndV0s_4NqOYi3eb0kkPNGSfZeosff8gX9KOauNlJ3X7Ehn6TH\"}"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","keyName":"e2e-rate-a-fc731b","subscription":"e2e-rate-iso-a-fc731b","tenant":"e2e-shared-a-eba9c8","userId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\",\"requestedSubscription\":\"e2e-rate-iso-a-fc731b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-eba9c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fc731b","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-eba9c8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fc731b"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0df73894-6a53-42f7-9ba1-797fdb81e5e1","keyName":"e2e-rate-a-fc731b","selected_subscription":"e2e-rate-iso-a-fc731b","selected_subscription_key":"ai-tenant-e2e-shared-a-eba9c8/e2e-rate-iso-a-fc731b@ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eba9c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fc731b","namespace":"ai-tenant-e2e-shared-a-eba9c8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-eba9c8/rate-test-model-eba9c8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d96238ef-a21f-4d3d-a178-974ec53d6ff6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55170","PortSpecifier":{"PortValue":55170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","method":"POST","path":"/ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c/v1/completions","host":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55170","PortSpecifier":{"PortValue":55170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784686950,"nanos":908250131},"http":{"id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","method":"POST","headers":{":authority":"e2e-shared-b-c6960c.apps.c04749b3-e708-4a19-8639-de911f4fb759.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qGtrfPguUDsBMc7a_HTLVpyRg04RxqcjO1AXvLsL0AXJ9SdWLHw9SPpuqigK"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qGtrfPguUDsBMc7a_HTLVpyRg04RxqcjO1AXvLsL0AXJ9SdWLHw9SPpuqigK\"}"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2598639b-6880-4dcb-8fde-457046992e49","keyName":"e2e-rate-b-fc731b","subscription":"e2e-rate-iso-b-fc731b","tenant":"e2e-shared-b-c6960c","userId":"2598639b-6880-4dcb-8fde-457046992e49","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c\",\"requestedSubscription\":\"e2e-rate-iso-b-fc731b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6960c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6960c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fc731b","namespace":"ai-tenant-e2e-shared-b-c6960c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c"}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c6960c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-fc731b"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2598639b-6880-4dcb-8fde-457046992e49","keyName":"e2e-rate-b-fc731b","selected_subscription":"e2e-rate-iso-b-fc731b","selected_subscription_key":"ai-tenant-e2e-shared-b-c6960c/e2e-rate-iso-b-fc731b@ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6960c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fc731b","namespace":"ai-tenant-e2e-shared-b-c6960c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c6960c/rate-test-model-c6960c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:22:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c0d29eb-894c-4a69-92c5-82227bb72a8e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a224c12775605a01e8b136b0d2933a195424a9cb5a58ae5272f8f32e7331f7e"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7fd80f05ae69d3af9627592f2bf6076eebc76a7715be4363dc01734bf813298"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092bb0e2a1e47ec6b2adfcee395f8a881a980638cb3fed8e71eb479dc8b773ad"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e0343c64bf40c66eee090ca340711497d35be9ca34c42448b386dc20af52bdd"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a6eb908fbf2f72a37fae9986ac6c353249b1e243d77d249d790ac972795a11e"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9324e4b65e8a8aed3a9512b7224a27ec4417e1dda40a581b249d08bae3d38b7f"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ba1de56aaca41491594ee9f858f56f1ea5492001d5cbf0de0023c1e4d473520"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cd39f34956f4459380899c30805bdd9038b88ece4073a47f34295b69c03b69b"} {"level":"info","ts":"2026-07-22T02:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc35c4dc7b81c1fa1a2433fa35a08ac3518a589a7f0cd1fc19232e3983863854"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5003345a669f57e0e1894d9a9472bc44761aa7b8f550cfdd2bafb22cd94ed7f9"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6ffa5be67851097d6d00c66bf8d5ed5f189f8ee2f2149ec6b41c788ba8af9b"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76bd63f49501889a799efbb1260d538983b342adbe696f0257667887dbbee3ce"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f97a97b62b599b518f5e25537a7d3aaccfcd31185a9491ff65cd47554533dc3f"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29119f764d892b9b190388bcda085b0196f5e8f6f83135ce20c7bdc4562dee0a"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcf39622b54dab801c54d6e17b7d8625340c2b949c3346e96cebb6577dfb2303"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33d1b5f208262102d1161838f6c8a583022e60e43769dd9faf43d1ed766ff403"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40ef983cb31342de65c4ab868ffa45a6476a7f8230e29efc5c72bbbd0d114992"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be8a2a2f8a4385bf8214f686f07f816d3f12364ae621748df9be628a5006a97"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20d9736e59cd13ddfa517aed62c60856b48c44268b20c109d34abd49b8c6d890"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1c407b4f2c64ea26c40b5601dc2fe16159059759a186891fe3a06dd90b4675d"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba7d0f0f6c41cfd3ec6a5d271bbd07f600521986b5bc1a4c37e8b43155738ae4"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09e5ebdd7efcba023080ff86f7b3b9833b6e21186a876522b518f3c197e69035"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83aba8a3d88a6bc3e771ea201b754393569297ae35477699dfc073ba7946e0d9"} {"level":"info","ts":"2026-07-22T02:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2cc220d5a153b2f63db2ebd76c12152446746044ac752b706e351a266a99262"}