{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"}
{"level":"error","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"error","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"error","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"error","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6"}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f"}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4"}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f"}
{"level":"info","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44232","PortSpecifier":{"PortValue":44232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44232","PortSpecifier":{"PortValue":44232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244569,"nanos":154874096},"http":{"id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33654","PortSpecifier":{"PortValue":33654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33654","PortSpecifier":{"PortValue":33654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244569,"nanos":190767230},"http":{"id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d29bb27e-f634-44a9-9852-562215ee0037","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44244","PortSpecifier":{"PortValue":44244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d29bb27e-f634-44a9-9852-562215ee0037","method":"POST","path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d29bb27e-f634-44a9-9852-562215ee0037","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44244","PortSpecifier":{"PortValue":44244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244569,"nanos":227164227},"http":{"id":"d29bb27e-f634-44a9-9852-562215ee0037","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xkjfgo3BQlrZYYmO_TnPEvt1q7drghQ4sFh6Uqhi17jGtdAYv8WMo9yAaJfI"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xkjfgo3BQlrZYYmO_TnPEvt1q7drghQ4sFh6Uqhi17jGtdAYv8WMo9yAaJfI\"}"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","keyName":"e2e-rate-a-ce497f","subscription":"e2e-rate-iso-a-ce497f","tenant":"e2e-shared-a-48992b","userId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\",\"requestedSubscription\":\"e2e-rate-iso-a-ce497f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce497f","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d29bb27e-f634-44a9-9852-562215ee0037","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce497f"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","keyName":"e2e-rate-a-ce497f","selected_subscription":"e2e-rate-iso-a-ce497f","selected_subscription_key":"ai-tenant-e2e-shared-a-48992b/e2e-rate-iso-a-ce497f@ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce497f","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d29bb27e-f634-44a9-9852-562215ee0037","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d29bb27e-f634-44a9-9852-562215ee0037","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44248","PortSpecifier":{"PortValue":44248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","method":"POST","path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44248","PortSpecifier":{"PortValue":44248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244570,"nanos":299919359},"http":{"id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xkjfgo3BQlrZYYmO_TnPEvt1q7drghQ4sFh6Uqhi17jGtdAYv8WMo9yAaJfI"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xkjfgo3BQlrZYYmO_TnPEvt1q7drghQ4sFh6Uqhi17jGtdAYv8WMo9yAaJfI\"}"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","keyName":"e2e-rate-a-ce497f","subscription":"e2e-rate-iso-a-ce497f","tenant":"e2e-shared-a-48992b","userId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\",\"requestedSubscription\":\"e2e-rate-iso-a-ce497f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce497f","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce497f"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","keyName":"e2e-rate-a-ce497f","selected_subscription":"e2e-rate-iso-a-ce497f","selected_subscription_key":"ai-tenant-e2e-shared-a-48992b/e2e-rate-iso-a-ce497f@ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce497f","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44256","PortSpecifier":{"PortValue":44256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","method":"POST","path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44256","PortSpecifier":{"PortValue":44256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244571,"nanos":354206031},"http":{"id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xkjfgo3BQlrZYYmO_TnPEvt1q7drghQ4sFh6Uqhi17jGtdAYv8WMo9yAaJfI"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xkjfgo3BQlrZYYmO_TnPEvt1q7drghQ4sFh6Uqhi17jGtdAYv8WMo9yAaJfI\"}"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","keyName":"e2e-rate-a-ce497f","subscription":"e2e-rate-iso-a-ce497f","tenant":"e2e-shared-a-48992b","userId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\",\"requestedSubscription\":\"e2e-rate-iso-a-ce497f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce497f","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce497f"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","keyName":"e2e-rate-a-ce497f","selected_subscription":"e2e-rate-iso-a-ce497f","selected_subscription_key":"ai-tenant-e2e-shared-a-48992b/e2e-rate-iso-a-ce497f@ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce497f","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40890","PortSpecifier":{"PortValue":40890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40890","PortSpecifier":{"PortValue":40890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244584,"nanos":147768693},"http":{"id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35804","PortSpecifier":{"PortValue":35804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3df1e56-ab31-4e95-b98d-2beba723d056","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35804","PortSpecifier":{"PortValue":35804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244584,"nanos":183699794},"http":{"id":"e3df1e56-ab31-4e95-b98d-2beba723d056","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40896","PortSpecifier":{"PortValue":40896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","method":"POST","path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40896","PortSpecifier":{"PortValue":40896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244584,"nanos":218611366},"http":{"id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ti39LOV2ZCArnmq5_r0XjdbU09cMfIzx5bhzIEyoQ9NHWXAkhY9LlRmhBSuc"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ti39LOV2ZCArnmq5_r0XjdbU09cMfIzx5bhzIEyoQ9NHWXAkhY9LlRmhBSuc\"}"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","keyName":"e2e-rate-a-1a398a","subscription":"e2e-rate-iso-a-1a398a","tenant":"e2e-shared-a-48992b","userId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\",\"requestedSubscription\":\"e2e-rate-iso-a-1a398a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a398a","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1a398a"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","keyName":"e2e-rate-a-1a398a","selected_subscription":"e2e-rate-iso-a-1a398a","selected_subscription_key":"ai-tenant-e2e-shared-a-48992b/e2e-rate-iso-a-1a398a@ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a398a","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42186","PortSpecifier":{"PortValue":42186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","method":"POST","path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42186","PortSpecifier":{"PortValue":42186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244585,"nanos":258138083},"http":{"id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ti39LOV2ZCArnmq5_r0XjdbU09cMfIzx5bhzIEyoQ9NHWXAkhY9LlRmhBSuc"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ti39LOV2ZCArnmq5_r0XjdbU09cMfIzx5bhzIEyoQ9NHWXAkhY9LlRmhBSuc\"}"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","keyName":"e2e-rate-a-1a398a","subscription":"e2e-rate-iso-a-1a398a","tenant":"e2e-shared-a-48992b","userId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\",\"requestedSubscription\":\"e2e-rate-iso-a-1a398a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a398a","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1a398a"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","keyName":"e2e-rate-a-1a398a","selected_subscription":"e2e-rate-iso-a-1a398a","selected_subscription_key":"ai-tenant-e2e-shared-a-48992b/e2e-rate-iso-a-1a398a@ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a398a","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42190","PortSpecifier":{"PortValue":42190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","method":"POST","path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42190","PortSpecifier":{"PortValue":42190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244586,"nanos":298714723},"http":{"id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ti39LOV2ZCArnmq5_r0XjdbU09cMfIzx5bhzIEyoQ9NHWXAkhY9LlRmhBSuc"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ti39LOV2ZCArnmq5_r0XjdbU09cMfIzx5bhzIEyoQ9NHWXAkhY9LlRmhBSuc\"}"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","keyName":"e2e-rate-a-1a398a","subscription":"e2e-rate-iso-a-1a398a","tenant":"e2e-shared-a-48992b","userId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\",\"requestedSubscription\":\"e2e-rate-iso-a-1a398a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a398a","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1a398a"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","keyName":"e2e-rate-a-1a398a","selected_subscription":"e2e-rate-iso-a-1a398a","selected_subscription_key":"ai-tenant-e2e-shared-a-48992b/e2e-rate-iso-a-1a398a@ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a398a","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42122","PortSpecifier":{"PortValue":42122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c69536e2-f434-4b54-94dd-4795f81ffd70","method":"POST","path":"/ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52/v1/completions","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42122","PortSpecifier":{"PortValue":42122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244586,"nanos":330982800},"http":{"id":"c69536e2-f434-4b54-94dd-4795f81ffd70","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1DYPQ67fUNbTxwlA4_q8eKAnEn82uSYorHjdOf6nfbMCWJY4p1Fiw4RK4AfmI"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1DYPQ67fUNbTxwlA4_q8eKAnEn82uSYorHjdOf6nfbMCWJY4p1Fiw4RK4AfmI\"}"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72165efb-efc4-4bf4-9601-062f842c1bc6","keyName":"e2e-rate-b-1a398a","subscription":"e2e-rate-iso-b-1a398a","tenant":"e2e-shared-b-b4ab52","userId":"72165efb-efc4-4bf4-9601-062f842c1bc6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52\",\"requestedSubscription\":\"e2e-rate-iso-b-1a398a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b4ab52","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1a398a","namespace":"ai-tenant-e2e-shared-b-b4ab52","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1a398a"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"72165efb-efc4-4bf4-9601-062f842c1bc6","keyName":"e2e-rate-b-1a398a","selected_subscription":"e2e-rate-iso-b-1a398a","selected_subscription_key":"ai-tenant-e2e-shared-b-b4ab52/e2e-rate-iso-b-1a398a@ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b4ab52","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1a398a","namespace":"ai-tenant-e2e-shared-b-b4ab52","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072"}
{"level":"info","ts":"2026-07-16T23:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4"}
{"level":"info","ts":"2026-07-16T23:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"info","ts":"2026-07-16T23:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"}
{"level":"info","ts":"2026-07-16T23:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71"}
{"level":"info","ts":"2026-07-16T23:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"}
{"level":"info","ts":"2026-07-16T23:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"info","ts":"2026-07-16T23:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"}
{"level":"info","ts":"2026-07-16T23:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"}