{"level":"debug","ts":"2026-07-31T22:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cacb5ef67b44d1038fbddf0870c0e63bc07796203b9505379fb58a337dd6721","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cacb5ef67b44d1038fbddf0870c0e63bc07796203b9505379fb58a337dd6721"} {"level":"debug","ts":"2026-07-31T22:52:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a"} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef6b65c8b83b4bc2989eca747c0eb525eb17af7b0e004a67c81b6e7b8cdc4a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef6b65c8b83b4bc2989eca747c0eb525eb17af7b0e004a67c81b6e7b8cdc4a28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef6b65c8b83b4bc2989eca747c0eb525eb17af7b0e004a67c81b6e7b8cdc4a28"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef6b65c8b83b4bc2989eca747c0eb525eb17af7b0e004a67c81b6e7b8cdc4a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef6b65c8b83b4bc2989eca747c0eb525eb17af7b0e004a67c81b6e7b8cdc4a28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef6b65c8b83b4bc2989eca747c0eb525eb17af7b0e004a67c81b6e7b8cdc4a28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be204b9d09adbbcf7136c43292aa68d573933f1c025fa14b066fc8075c123954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef6b65c8b83b4bc2989eca747c0eb525eb17af7b0e004a67c81b6e7b8cdc4a28"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be204b9d09adbbcf7136c43292aa68d573933f1c025fa14b066fc8075c123954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be204b9d09adbbcf7136c43292aa68d573933f1c025fa14b066fc8075c123954"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef6b65c8b83b4bc2989eca747c0eb525eb17af7b0e004a67c81b6e7b8cdc4a28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be204b9d09adbbcf7136c43292aa68d573933f1c025fa14b066fc8075c123954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be204b9d09adbbcf7136c43292aa68d573933f1c025fa14b066fc8075c123954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be204b9d09adbbcf7136c43292aa68d573933f1c025fa14b066fc8075c123954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be204b9d09adbbcf7136c43292aa68d573933f1c025fa14b066fc8075c123954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c5262f0a033091768ad7f32c8757d045d0693e1a41f0856d9cdc450f8b1fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef6b65c8b83b4bc2989eca747c0eb525eb17af7b0e004a67c81b6e7b8cdc4a28"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c5262f0a033091768ad7f32c8757d045d0693e1a41f0856d9cdc450f8b1fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be204b9d09adbbcf7136c43292aa68d573933f1c025fa14b066fc8075c123954"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c5262f0a033091768ad7f32c8757d045d0693e1a41f0856d9cdc450f8b1fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c5262f0a033091768ad7f32c8757d045d0693e1a41f0856d9cdc450f8b1fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c5262f0a033091768ad7f32c8757d045d0693e1a41f0856d9cdc450f8b1fb2"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c5262f0a033091768ad7f32c8757d045d0693e1a41f0856d9cdc450f8b1fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c5262f0a033091768ad7f32c8757d045d0693e1a41f0856d9cdc450f8b1fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c5262f0a033091768ad7f32c8757d045d0693e1a41f0856d9cdc450f8b1fb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c5262f0a033091768ad7f32c8757d045d0693e1a41f0856d9cdc450f8b1fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c5262f0a033091768ad7f32c8757d045d0693e1a41f0856d9cdc450f8b1fb2"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c5262f0a033091768ad7f32c8757d045d0693e1a41f0856d9cdc450f8b1fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c5262f0a033091768ad7f32c8757d045d0693e1a41f0856d9cdc450f8b1fb2"} {"level":"error","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:52:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"} {"level":"info","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80e06e6b-05c1-46be-9126-bd737f68a543","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41596","PortSpecifier":{"PortValue":41596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80e06e6b-05c1-46be-9126-bd737f68a543","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80e06e6b-05c1-46be-9126-bd737f68a543","object":"source:{address:{socket_address:{address:\"10.132.0.11:41596\" port_value:41596}}} destination:{address:{socket_address:{address:\"10.132.0.56:443\" port_value:443}}} request:{time:{seconds:1785538369 nanos:525143356} http:{id:\"80e06e6b-05c1-46be-9126-bd737f68a543\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.56~e2e-shared-a-08271f-openshift-default-5bfcccb844-vcnkd.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"80e06e6b-05c1-46be-9126-bd737f68a543\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"ca2bb1aa09deffbba3ee588cf29e74fd23493569d4505fb21da9ff3321131915\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80e06e6b-05c1-46be-9126-bd737f68a543","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80e06e6b-05c1-46be-9126-bd737f68a543","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bc36ef6d24be"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d654b959-a65b-43da-a44d-553fdfc112fd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"82aaae42-ddd8-4fdf-9d49-c147b49db607","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80e06e6b-05c1-46be-9126-bd737f68a543","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bc36ef6d24be"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d654b959-a65b-43da-a44d-553fdfc112fd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"82aaae42-ddd8-4fdf-9d49-c147b49db607","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca2bb1aa09deffbba3ee588cf29e74fd23493569d4505fb21da9ff3321131915"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.56~e2e-shared-a-08271f-openshift-default-5bfcccb844-vcnkd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"80e06e6b-05c1-46be-9126-bd737f68a543"},"host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"80e06e6b-05c1-46be-9126-bd737f68a543","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":525143356,"seconds":1785538369}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":41596},"address":"10.132.0.11:41596"}}}}},"destination":{"address":"10.132.0.56:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"ca2bb1aa09deffbba3ee588cf29e74fd23493569d4505fb21da9ff3321131915"},"headers":{":authority":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.56~e2e-shared-a-08271f-openshift-default-5bfcccb844-vcnkd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"80e06e6b-05c1-46be-9126-bd737f68a543"},"host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"80e06e6b-05c1-46be-9126-bd737f68a543","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":525143356,"seconds":1785538369},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:41596","port":41596}}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e06e6b-05c1-46be-9126-bd737f68a543","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e06e6b-05c1-46be-9126-bd737f68a543","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e06e6b-05c1-46be-9126-bd737f68a543","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-08271f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80e06e6b-05c1-46be-9126-bd737f68a543","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e06e6b-05c1-46be-9126-bd737f68a543","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e06e6b-05c1-46be-9126-bd737f68a543","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80e06e6b-05c1-46be-9126-bd737f68a543","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80e06e6b-05c1-46be-9126-bd737f68a543","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62273df0-87c9-474e-882e-81effede7c1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44090","PortSpecifier":{"PortValue":44090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62273df0-87c9-474e-882e-81effede7c1e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62273df0-87c9-474e-882e-81effede7c1e","object":"source:{address:{socket_address:{address:\"10.132.0.11:44090\" port_value:44090}}} destination:{address:{socket_address:{address:\"10.132.0.57:443\" port_value:443}}} request:{time:{seconds:1785538369 nanos:565684337} http:{id:\"62273df0-87c9-474e-882e-81effede7c1e\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-3326ad.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.57~e2e-shared-b-3326ad-openshift-default-5987c69b44-9v8hn.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"62273df0-87c9-474e-882e-81effede7c1e\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"bb1d7f854dc05e5d44ab06d4c4788aa06d2305720463ab7ff71449e6b1095bf5\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"62273df0-87c9-474e-882e-81effede7c1e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62273df0-87c9-474e-882e-81effede7c1e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bc36ef6d24be"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d654b959-a65b-43da-a44d-553fdfc112fd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"82aaae42-ddd8-4fdf-9d49-c147b49db607","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62273df0-87c9-474e-882e-81effede7c1e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bc36ef6d24be"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d654b959-a65b-43da-a44d-553fdfc112fd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"82aaae42-ddd8-4fdf-9d49-c147b49db607","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb1d7f854dc05e5d44ab06d4c4788aa06d2305720463ab7ff71449e6b1095bf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-3326ad.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.57~e2e-shared-b-3326ad-openshift-default-5987c69b44-9v8hn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"62273df0-87c9-474e-882e-81effede7c1e"},"host":"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"62273df0-87c9-474e-882e-81effede7c1e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":565684337,"seconds":1785538369}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44090},"address":"10.132.0.11:44090"}}}}},"destination":{"address":"10.132.0.57:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"bb1d7f854dc05e5d44ab06d4c4788aa06d2305720463ab7ff71449e6b1095bf5"},"headers":{":authority":"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-3326ad.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.57~e2e-shared-b-3326ad-openshift-default-5987c69b44-9v8hn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"62273df0-87c9-474e-882e-81effede7c1e"},"host":"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"62273df0-87c9-474e-882e-81effede7c1e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":565684337,"seconds":1785538369},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:44090","port":44090}}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62273df0-87c9-474e-882e-81effede7c1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62273df0-87c9-474e-882e-81effede7c1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62273df0-87c9-474e-882e-81effede7c1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3326ad/rate-test-model-3326ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3326ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"62273df0-87c9-474e-882e-81effede7c1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62273df0-87c9-474e-882e-81effede7c1e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62273df0-87c9-474e-882e-81effede7c1e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62273df0-87c9-474e-882e-81effede7c1e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62273df0-87c9-474e-882e-81effede7c1e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41608","PortSpecifier":{"PortValue":41608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d43cfe30-5688-4990-b08b-87abf510ed0b","method":"POST","path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions","host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","object":"source:{address:{socket_address:{address:\"10.132.0.11:41608\" port_value:41608}}} destination:{address:{socket_address:{address:\"10.132.0.56:443\" port_value:443}}} request:{time:{seconds:1785538369 nanos:602472549} http:{id:\"d43cfe30-5688-4990-b08b-87abf510ed0b\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-08271f-kserve-workload-svc.ai-tenant-e2e-shared-a-08271f.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0wODI3MWYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTA4MjcxZi1vcGVuc2hpZnQtZGVmYXVsdC01YmZjY2NiODQ0LXZjbmtkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTA4MjcxZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0wODI3MWYtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.56~e2e-shared-a-08271f-openshift-default-5bfcccb844-vcnkd.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"d43cfe30-5688-4990-b08b-87abf510ed0b\"} path:\"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions\" host:\"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"4c762071861e16a74aaa4b87c1b7bed0100d7cbfc29578d734ca9abb390c15ec\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15Nu2G7HzpzuNaQBe_w9tGXrYjQqWLZHanGJdp4J9p7JRLIlQujlmskdgYpIq"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5aa4c50b-516d-4021-8282-4c6e26f04229","keyName":"e2e-rate-a-f0a2ba","subscription":"e2e-rate-iso-a-f0a2ba","tenant":"e2e-shared-a-08271f","userId":"5aa4c50b-516d-4021-8282-4c6e26f04229","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-08271f/models/facebook/opt-125m","name":"rate-test-model-08271f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f0a2ba","namespace":"ai-tenant-e2e-shared-a-08271f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f"}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-08271f-kserve-workload-svc.ai-tenant-e2e-shared-a-08271f.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.56~e2e-shared-a-08271f-openshift-default-5bfcccb844-vcnkd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d43cfe30-5688-4990-b08b-87abf510ed0b"},"host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"d43cfe30-5688-4990-b08b-87abf510ed0b","method":"POST","path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":602472549,"seconds":1785538369}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":41608},"address":"10.132.0.11:41608"}}}}},"destination":{"address":"10.132.0.56:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4c762071861e16a74aaa4b87c1b7bed0100d7cbfc29578d734ca9abb390c15ec"},"headers":{":authority":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-08271f-kserve-workload-svc.ai-tenant-e2e-shared-a-08271f.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.56~e2e-shared-a-08271f-openshift-default-5bfcccb844-vcnkd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d43cfe30-5688-4990-b08b-87abf510ed0b"},"host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"d43cfe30-5688-4990-b08b-87abf510ed0b","method":"POST","path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":602472549,"seconds":1785538369},"url_path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:41608","port":41608}}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-08271f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f0a2ba"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5aa4c50b-516d-4021-8282-4c6e26f04229","keyName":"e2e-rate-a-f0a2ba","selected_subscription":"e2e-rate-iso-a-f0a2ba","selected_subscription_key":"ai-tenant-e2e-shared-a-08271f/e2e-rate-iso-a-f0a2ba@ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-08271f/models/facebook/opt-125m","name":"rate-test-model-08271f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f0a2ba","namespace":"ai-tenant-e2e-shared-a-08271f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:52:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d43cfe30-5688-4990-b08b-87abf510ed0b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41618","PortSpecifier":{"PortValue":41618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","method":"POST","path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions","host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","object":"source:{address:{socket_address:{address:\"10.132.0.11:41618\" port_value:41618}}} destination:{address:{socket_address:{address:\"10.132.0.56:443\" port_value:443}}} request:{time:{seconds:1785538370 nanos:642128725} http:{id:\"7056547b-d62a-45e1-8de7-06d56f9ca45f\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-08271f-kserve-workload-svc.ai-tenant-e2e-shared-a-08271f.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.56~e2e-shared-a-08271f-openshift-default-5bfcccb844-vcnkd.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"7056547b-d62a-45e1-8de7-06d56f9ca45f\"} path:\"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions\" host:\"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"4c762071861e16a74aaa4b87c1b7bed0100d7cbfc29578d734ca9abb390c15ec\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15Nu2G7HzpzuNaQBe_w9tGXrYjQqWLZHanGJdp4J9p7JRLIlQujlmskdgYpIq"} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5aa4c50b-516d-4021-8282-4c6e26f04229","keyName":"e2e-rate-a-f0a2ba","subscription":"e2e-rate-iso-a-f0a2ba","tenant":"e2e-shared-a-08271f","userId":"5aa4c50b-516d-4021-8282-4c6e26f04229","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-08271f/models/facebook/opt-125m","name":"rate-test-model-08271f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f0a2ba","namespace":"ai-tenant-e2e-shared-a-08271f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f"}} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-08271f-kserve-workload-svc.ai-tenant-e2e-shared-a-08271f.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.56~e2e-shared-a-08271f-openshift-default-5bfcccb844-vcnkd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7056547b-d62a-45e1-8de7-06d56f9ca45f"},"host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","method":"POST","path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":642128725,"seconds":1785538370}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":41618},"address":"10.132.0.11:41618"}}}}},"destination":{"address":"10.132.0.56:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4c762071861e16a74aaa4b87c1b7bed0100d7cbfc29578d734ca9abb390c15ec"},"headers":{":authority":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-08271f-kserve-workload-svc.ai-tenant-e2e-shared-a-08271f.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.56~e2e-shared-a-08271f-openshift-default-5bfcccb844-vcnkd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7056547b-d62a-45e1-8de7-06d56f9ca45f"},"host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","method":"POST","path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":642128725,"seconds":1785538370},"url_path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:41618","port":41618}}} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-08271f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f0a2ba"} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5aa4c50b-516d-4021-8282-4c6e26f04229","keyName":"e2e-rate-a-f0a2ba","selected_subscription":"e2e-rate-iso-a-f0a2ba","selected_subscription_key":"ai-tenant-e2e-shared-a-08271f/e2e-rate-iso-a-f0a2ba@ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-08271f/models/facebook/opt-125m","name":"rate-test-model-08271f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f0a2ba","namespace":"ai-tenant-e2e-shared-a-08271f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7056547b-d62a-45e1-8de7-06d56f9ca45f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41624","PortSpecifier":{"PortValue":41624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"618eb887-629a-4b71-8797-0a4afc3c6dac","method":"POST","path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions","host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","object":"source:{address:{socket_address:{address:\"10.132.0.11:41624\" port_value:41624}}} destination:{address:{socket_address:{address:\"10.132.0.56:443\" port_value:443}}} request:{time:{seconds:1785538371 nanos:683345315} http:{id:\"618eb887-629a-4b71-8797-0a4afc3c6dac\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-08271f-kserve-workload-svc.ai-tenant-e2e-shared-a-08271f.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.56~e2e-shared-a-08271f-openshift-default-5bfcccb844-vcnkd.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"618eb887-629a-4b71-8797-0a4afc3c6dac\"} path:\"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions\" host:\"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"4c762071861e16a74aaa4b87c1b7bed0100d7cbfc29578d734ca9abb390c15ec\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15Nu2G7HzpzuNaQBe_w9tGXrYjQqWLZHanGJdp4J9p7JRLIlQujlmskdgYpIq"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5aa4c50b-516d-4021-8282-4c6e26f04229","keyName":"e2e-rate-a-f0a2ba","subscription":"e2e-rate-iso-a-f0a2ba","tenant":"e2e-shared-a-08271f","userId":"5aa4c50b-516d-4021-8282-4c6e26f04229","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-08271f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-08271f/models/facebook/opt-125m","name":"rate-test-model-08271f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f0a2ba","namespace":"ai-tenant-e2e-shared-a-08271f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f"}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-08271f-kserve-workload-svc.ai-tenant-e2e-shared-a-08271f.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0wODI3MWYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTA4MjcxZi1vcGVuc2hpZnQtZGVmYXVsdC01YmZjY2NiODQ0LXZjbmtkCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTA4MjcxZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0wODI3MWYtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.56~e2e-shared-a-08271f-openshift-default-5bfcccb844-vcnkd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"618eb887-629a-4b71-8797-0a4afc3c6dac"},"host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"618eb887-629a-4b71-8797-0a4afc3c6dac","method":"POST","path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":683345315,"seconds":1785538371}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":41624},"address":"10.132.0.11:41624"}}}}},"destination":{"address":"10.132.0.56:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4c762071861e16a74aaa4b87c1b7bed0100d7cbfc29578d734ca9abb390c15ec"},"headers":{":authority":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-08271f-kserve-workload-svc.ai-tenant-e2e-shared-a-08271f.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.56~e2e-shared-a-08271f-openshift-default-5bfcccb844-vcnkd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"618eb887-629a-4b71-8797-0a4afc3c6dac"},"host":"e2e-shared-a-08271f.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"618eb887-629a-4b71-8797-0a4afc3c6dac","method":"POST","path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":683345315,"seconds":1785538371},"url_path":"/ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:41624","port":41624}}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-08271f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f0a2ba"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5aa4c50b-516d-4021-8282-4c6e26f04229","keyName":"e2e-rate-a-f0a2ba","selected_subscription":"e2e-rate-iso-a-f0a2ba","selected_subscription_key":"ai-tenant-e2e-shared-a-08271f/e2e-rate-iso-a-f0a2ba@ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-08271f/models/facebook/opt-125m","name":"rate-test-model-08271f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f0a2ba","namespace":"ai-tenant-e2e-shared-a-08271f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-08271f/rate-test-model-08271f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"618eb887-629a-4b71-8797-0a4afc3c6dac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44100","PortSpecifier":{"PortValue":44100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","method":"POST","path":"/ai-tenant-e2e-shared-b-3326ad/rate-test-model-3326ad/v1/completions","host":"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","object":"source:{address:{socket_address:{address:\"10.132.0.11:44100\" port_value:44100}}} destination:{address:{socket_address:{address:\"10.132.0.57:443\" port_value:443}}} request:{time:{seconds:1785538371 nanos:719271827} http:{id:\"c5fb03f8-773d-4f68-9994-8037ec28b33d\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-3326ad/rate-test-model-3326ad/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-3326ad-kserve-workload-svc.ai-tenant-e2e-shared-b-3326ad.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0zMzI2YWQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTMzMjZhZC1vcGVuc2hpZnQtZGVmYXVsdC01OTg3YzY5YjQ0LTl2OGhuCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTMzMjZhZC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi0zMzI2YWQtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.57~e2e-shared-b-3326ad-openshift-default-5987c69b44-9v8hn.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"c5fb03f8-773d-4f68-9994-8037ec28b33d\"} path:\"/ai-tenant-e2e-shared-b-3326ad/rate-test-model-3326ad/v1/completions\" host:\"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"d44ab8bb90ee613aaca2e2fde3893ae19b313d22404525efeac687254b9a638f\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bYl4frfW63n44xq7_H2qFm4BeRBJLlKiF05ptNQL8o3itccVXKFpKRxioXuI"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3326ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3326ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bbf34058-05d0-4ce8-8ab9-7bf8b15625c9","keyName":"e2e-rate-b-f0a2ba","subscription":"e2e-rate-iso-b-f0a2ba","tenant":"e2e-shared-b-3326ad","userId":"bbf34058-05d0-4ce8-8ab9-7bf8b15625c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3326ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3326ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-3326ad/models/facebook/opt-125m","name":"rate-test-model-3326ad","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f0a2ba","namespace":"ai-tenant-e2e-shared-b-3326ad","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3326ad/rate-test-model-3326ad"}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-3326ad-kserve-workload-svc.ai-tenant-e2e-shared-b-3326ad.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.57~e2e-shared-b-3326ad-openshift-default-5987c69b44-9v8hn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"c5fb03f8-773d-4f68-9994-8037ec28b33d"},"host":"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","method":"POST","path":"/ai-tenant-e2e-shared-b-3326ad/rate-test-model-3326ad/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":719271827,"seconds":1785538371}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44100},"address":"10.132.0.11:44100"}}}}},"destination":{"address":"10.132.0.57:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"d44ab8bb90ee613aaca2e2fde3893ae19b313d22404525efeac687254b9a638f"},"headers":{":authority":"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3326ad/rate-test-model-3326ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-3326ad-kserve-workload-svc.ai-tenant-e2e-shared-b-3326ad.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.57~e2e-shared-b-3326ad-openshift-default-5987c69b44-9v8hn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"c5fb03f8-773d-4f68-9994-8037ec28b33d"},"host":"e2e-shared-b-3326ad.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","method":"POST","path":"/ai-tenant-e2e-shared-b-3326ad/rate-test-model-3326ad/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":719271827,"seconds":1785538371},"url_path":"/ai-tenant-e2e-shared-b-3326ad/rate-test-model-3326ad/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:44100","port":44100}}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3326ad/rate-test-model-3326ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3326ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-f0a2ba"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bbf34058-05d0-4ce8-8ab9-7bf8b15625c9","keyName":"e2e-rate-b-f0a2ba","selected_subscription":"e2e-rate-iso-b-f0a2ba","selected_subscription_key":"ai-tenant-e2e-shared-b-3326ad/e2e-rate-iso-b-f0a2ba@ai-tenant-e2e-shared-b-3326ad/rate-test-model-3326ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-3326ad/models/facebook/opt-125m","name":"rate-test-model-3326ad","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f0a2ba","namespace":"ai-tenant-e2e-shared-b-3326ad","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3326ad/rate-test-model-3326ad"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5fb03f8-773d-4f68-9994-8037ec28b33d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d44ab8bb90ee613aaca2e2fde3893ae19b313d22404525efeac687254b9a638f"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca2bb1aa09deffbba3ee588cf29e74fd23493569d4505fb21da9ff3321131915"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bc68bc1c9767087d354c613b41b3cdb3fb719fff97cc85dbaec75af92560e77"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78ca55754b83c7c62d9538bdde7e225f3753b70663536a180d1fc20835690a34"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f784bdb0e33019ce76ea2db6411d7ee5446d6d39b36b7e857ab150bec793dd52"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef6b65c8b83b4bc2989eca747c0eb525eb17af7b0e004a67c81b6e7b8cdc4a28"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aac1b71a1c2716ff7a3d7b370cfdd8efbddb70e067c9a2ec55ecfb86c8e09514"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa6984b0cd2a9e65f53b9739254a915af8ba842b8903d651fa739b1f0462e72d"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a71a50f12fee294c3f685ce1f98a79e285de7b2775bfff3cd1cc068867f8a7a"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea5cef4d90dd4015ca1acb2ab4b89713baed9f42b8863a03848582e44fc8a88f"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cacb5ef67b44d1038fbddf0870c0e63bc07796203b9505379fb58a337dd6721"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bf467a8cd907be6bf3ca72b1de9a30ae24f5d010e36eeaf7d26fc4e8d440683"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb53d02be98f2ac0df6c215b31b0bd0e699b925ec36ebf5a2098aa83a9aa0e52"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2318c6e8756838fc91d3b54b3ba71053c6746f2181dab5912ae5db02a7a8ebf5"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c3c8e4b161a1ddc765bb715d76edc80a67b4f12242af8d069664949cfb919dd"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8073e290dd563c24aea394d1554c205649279644feeef44c5d71ce9a7fac098e"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6c5262f0a033091768ad7f32c8757d045d0693e1a41f0856d9cdc450f8b1fb2"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be204b9d09adbbcf7136c43292aa68d573933f1c025fa14b066fc8075c123954"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebdb1f606006eda3dc7e5a554482e875a20c4c344fd5a25fb94553a7f7a9af19"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c762071861e16a74aaa4b87c1b7bed0100d7cbfc29578d734ca9abb390c15ec"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb1d7f854dc05e5d44ab06d4c4788aa06d2305720463ab7ff71449e6b1095bf5"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e935c5fc250162c0b19f6714d93aa89b4db565e7376da8ed8b16d566b324d049"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8ce9d1978f13d9d0a1b5eab9b0d3bc036ad7b5e0edf32285d323f75df684f1a"} {"level":"info","ts":"2026-07-31T22:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cac2999c04ff634401a5a4661bb5ba8e096d70a9813b6b7632fe62430c8fa478"} {"level":"info","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41560","PortSpecifier":{"PortValue":41560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","object":"source:{address:{socket_address:{address:\"10.132.0.11:41560\" port_value:41560}}} destination:{address:{socket_address:{address:\"10.132.0.37:443\" port_value:443}}} request:{time:{seconds:1785538458 nanos:914469320} http:{id:\"00caa88b-df93-4a42-9cee-99ff34ecd4f3\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.37~maas-default-gateway-openshift-default-78bb78ff78-hhkcc.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"00caa88b-df93-4a42-9cee-99ff34ecd4f3\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bc36ef6d24be"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d654b959-a65b-43da-a44d-553fdfc112fd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"82aaae42-ddd8-4fdf-9d49-c147b49db607","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bc36ef6d24be"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d654b959-a65b-43da-a44d-553fdfc112fd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"82aaae42-ddd8-4fdf-9d49-c147b49db607","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.37~maas-default-gateway-openshift-default-78bb78ff78-hhkcc.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3"},"host":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":914469320,"seconds":1785538458}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":41560},"address":"10.132.0.11:41560"}}}}},"destination":{"address":"10.132.0.37:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.37~maas-default-gateway-openshift-default-78bb78ff78-hhkcc.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3"},"host":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":914469320,"seconds":1785538458},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:41560","port":41560}}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00caa88b-df93-4a42-9cee-99ff34ecd4f3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41570","PortSpecifier":{"PortValue":41570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","object":"source:{address:{socket_address:{address:\"10.132.0.11:41570\" port_value:41570}}} destination:{address:{socket_address:{address:\"10.132.0.37:443\" port_value:443}}} request:{time:{seconds:1785538458 nanos:967852439} http:{id:\"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LWhoa2NjCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.37~maas-default-gateway-openshift-default-78bb78ff78-hhkcc.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OH4xdaN9XOwMHAfd_iZB8khH4QTgjAqPYC7Pbh4Udr3MIA8twjPXzMfATPtv"} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5f66a22b-94e5-4dc0-bf01-3570dc8a2e71","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"5f66a22b-94e5-4dc0-bf01-3570dc8a2e71","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.37~maas-default-gateway-openshift-default-78bb78ff78-hhkcc.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8"},"host":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":967852439,"seconds":1785538458}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":41570},"address":"10.132.0.11:41570"}}}}},"destination":{"address":"10.132.0.37:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.37~maas-default-gateway-openshift-default-78bb78ff78-hhkcc.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8"},"host":"maas.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":967852439,"seconds":1785538458},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:41570","port":41570}}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5f66a22b-94e5-4dc0-bf01-3570dc8a2e71","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:54:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7eef4f93-92d5-410b-a3a0-1ad56ff90bb8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c"} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c"} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c"} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0841b0fd303fa882635c0835a1f12c75a4f6400c7357c19d558d0917ab71cb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0841b0fd303fa882635c0835a1f12c75a4f6400c7357c19d558d0917ab71cb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0841b0fd303fa882635c0835a1f12c75a4f6400c7357c19d558d0917ab71cb7"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0841b0fd303fa882635c0835a1f12c75a4f6400c7357c19d558d0917ab71cb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0841b0fd303fa882635c0835a1f12c75a4f6400c7357c19d558d0917ab71cb7"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0841b0fd303fa882635c0835a1f12c75a4f6400c7357c19d558d0917ab71cb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0841b0fd303fa882635c0835a1f12c75a4f6400c7357c19d558d0917ab71cb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0841b0fd303fa882635c0835a1f12c75a4f6400c7357c19d558d0917ab71cb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0841b0fd303fa882635c0835a1f12c75a4f6400c7357c19d558d0917ab71cb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0841b0fd303fa882635c0835a1f12c75a4f6400c7357c19d558d0917ab71cb7"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0841b0fd303fa882635c0835a1f12c75a4f6400c7357c19d558d0917ab71cb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0841b0fd303fa882635c0835a1f12c75a4f6400c7357c19d558d0917ab71cb7"} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46"} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c83e21834b6354fd023a9de3483ddecd92c44a97448742748e20d06441c315f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c83e21834b6354fd023a9de3483ddecd92c44a97448742748e20d06441c315f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c83e21834b6354fd023a9de3483ddecd92c44a97448742748e20d06441c315f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c83e21834b6354fd023a9de3483ddecd92c44a97448742748e20d06441c315f8"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c83e21834b6354fd023a9de3483ddecd92c44a97448742748e20d06441c315f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c83e21834b6354fd023a9de3483ddecd92c44a97448742748e20d06441c315f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c83e21834b6354fd023a9de3483ddecd92c44a97448742748e20d06441c315f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c83e21834b6354fd023a9de3483ddecd92c44a97448742748e20d06441c315f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca76435819464bc286a823719afc77a4f1b7d6a03c30c918414347fe2e52598d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c83e21834b6354fd023a9de3483ddecd92c44a97448742748e20d06441c315f8"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca76435819464bc286a823719afc77a4f1b7d6a03c30c918414347fe2e52598d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c83e21834b6354fd023a9de3483ddecd92c44a97448742748e20d06441c315f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca76435819464bc286a823719afc77a4f1b7d6a03c30c918414347fe2e52598d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca76435819464bc286a823719afc77a4f1b7d6a03c30c918414347fe2e52598d"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca76435819464bc286a823719afc77a4f1b7d6a03c30c918414347fe2e52598d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca76435819464bc286a823719afc77a4f1b7d6a03c30c918414347fe2e52598d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca76435819464bc286a823719afc77a4f1b7d6a03c30c918414347fe2e52598d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c83e21834b6354fd023a9de3483ddecd92c44a97448742748e20d06441c315f8"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca76435819464bc286a823719afc77a4f1b7d6a03c30c918414347fe2e52598d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca76435819464bc286a823719afc77a4f1b7d6a03c30c918414347fe2e52598d"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca76435819464bc286a823719afc77a4f1b7d6a03c30c918414347fe2e52598d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4599220f9acf1dce0cfadaf999707f06bb9fc439482ba528d1e3dc261f7b4af8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4599220f9acf1dce0cfadaf999707f06bb9fc439482ba528d1e3dc261f7b4af8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4599220f9acf1dce0cfadaf999707f06bb9fc439482ba528d1e3dc261f7b4af8"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4599220f9acf1dce0cfadaf999707f06bb9fc439482ba528d1e3dc261f7b4af8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4599220f9acf1dce0cfadaf999707f06bb9fc439482ba528d1e3dc261f7b4af8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4599220f9acf1dce0cfadaf999707f06bb9fc439482ba528d1e3dc261f7b4af8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4599220f9acf1dce0cfadaf999707f06bb9fc439482ba528d1e3dc261f7b4af8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4599220f9acf1dce0cfadaf999707f06bb9fc439482ba528d1e3dc261f7b4af8"} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068"} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"} {"level":"debug","ts":"2026-07-31T22:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1a2f2add9b7520bf882aa5822d571e9ff00206d607695544debd3d17d7f71dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1a2f2add9b7520bf882aa5822d571e9ff00206d607695544debd3d17d7f71dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a2f2add9b7520bf882aa5822d571e9ff00206d607695544debd3d17d7f71dd"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1a2f2add9b7520bf882aa5822d571e9ff00206d607695544debd3d17d7f71dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1a2f2add9b7520bf882aa5822d571e9ff00206d607695544debd3d17d7f71dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a2f2add9b7520bf882aa5822d571e9ff00206d607695544debd3d17d7f71dd"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1a2f2add9b7520bf882aa5822d571e9ff00206d607695544debd3d17d7f71dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7be6a31a7f934aaf3962592353032fd29331c90ad9d55da5fa548b6a9f8b5429"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1a2f2add9b7520bf882aa5822d571e9ff00206d607695544debd3d17d7f71dd"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7be6a31a7f934aaf3962592353032fd29331c90ad9d55da5fa548b6a9f8b5429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7be6a31a7f934aaf3962592353032fd29331c90ad9d55da5fa548b6a9f8b5429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7be6a31a7f934aaf3962592353032fd29331c90ad9d55da5fa548b6a9f8b5429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1a2f2add9b7520bf882aa5822d571e9ff00206d607695544debd3d17d7f71dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7be6a31a7f934aaf3962592353032fd29331c90ad9d55da5fa548b6a9f8b5429"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7be6a31a7f934aaf3962592353032fd29331c90ad9d55da5fa548b6a9f8b5429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"} {"level":"error","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:55:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37978","PortSpecifier":{"PortValue":37978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:55:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","object":"source:{address:{socket_address:{address:\"10.132.0.11:37978\" port_value:37978}}} destination:{address:{socket_address:{address:\"10.133.0.59:443\" port_value:443}}} request:{time:{seconds:1785538501 nanos:903948023} http:{id:\"028dcbf1-a507-414e-ac28-68cad70f5ca6\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-56c69a.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.59~e2e-ipp-a-56c69a-openshift-default-64d8d8549d-pxmfv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"028dcbf1-a507-414e-ac28-68cad70f5ca6\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:55:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:55:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bc36ef6d24be"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d654b959-a65b-43da-a44d-553fdfc112fd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"82aaae42-ddd8-4fdf-9d49-c147b49db607","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bc36ef6d24be"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d654b959-a65b-43da-a44d-553fdfc112fd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"82aaae42-ddd8-4fdf-9d49-c147b49db607","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-56c69a.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS01NmM2OWEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTU2YzY5YS1vcGVuc2hpZnQtZGVmYXVsdC02NGQ4ZDg1NDlkLXB4bWZ2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTU2YzY5YS1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS01NmM2OWEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.59~e2e-ipp-a-56c69a-openshift-default-64d8d8549d-pxmfv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"028dcbf1-a507-414e-ac28-68cad70f5ca6"},"host":"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":903948023,"seconds":1785538501}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37978},"address":"10.132.0.11:37978"}}}}},"destination":{"address":"10.133.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"},"headers":{":authority":"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-56c69a.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.59~e2e-ipp-a-56c69a-openshift-default-64d8d8549d-pxmfv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"028dcbf1-a507-414e-ac28-68cad70f5ca6"},"host":"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":903948023,"seconds":1785538501},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:37978","port":37978}}} {"level":"debug","ts":"2026-07-31T22:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-56c69a/ipp-route-56c69a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-56c69a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:55:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:55:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"028dcbf1-a507-414e-ac28-68cad70f5ca6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37992","PortSpecifier":{"PortValue":37992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","method":"POST","path":"/ai-tenant-e2e-ipp-a-56c69a/ipp-route-56c69a/v1/chat/completions","host":"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","object":"source:{address:{socket_address:{address:\"10.132.0.11:37992\" port_value:37992}}} destination:{address:{socket_address:{address:\"10.133.0.59:443\" port_value:443}}} request:{time:{seconds:1785538503 nanos:964395091} http:{id:\"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-56c69a/ipp-route-56c69a/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-56c69a-kserve-workload-svc.ai-tenant-e2e-ipp-a-56c69a.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.59~e2e-ipp-a-56c69a-openshift-default-64d8d8549d-pxmfv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa\"} path:\"/ai-tenant-e2e-ipp-a-56c69a/ipp-route-56c69a/v1/chat/completions\" host:\"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"4599220f9acf1dce0cfadaf999707f06bb9fc439482ba528d1e3dc261f7b4af8\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CFN3ptb8FvDDbWlS_gwhfiL6IWlFlCpIT8K99cPNTgcb2RnIeUzIWjrjG2uK"} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-56c69a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-56c69a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0e17c419-007e-48d0-9ea8-3166959f4d98","keyName":"e2e-ipp-56c69a","subscription":"ipp-route-56c69a-sub","tenant":"e2e-ipp-a-56c69a","userId":"0e17c419-007e-48d0-9ea8-3166959f4d98","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-56c69a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-56c69a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-56c69a/models/facebook/opt-125m","name":"ipp-route-56c69a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-56c69a-sub","namespace":"ai-tenant-e2e-ipp-a-56c69a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-56c69a/ipp-route-56c69a"}} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-56c69a-kserve-workload-svc.ai-tenant-e2e-ipp-a-56c69a.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.59~e2e-ipp-a-56c69a-openshift-default-64d8d8549d-pxmfv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa"},"host":"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","method":"POST","path":"/ai-tenant-e2e-ipp-a-56c69a/ipp-route-56c69a/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":964395091,"seconds":1785538503}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37992},"address":"10.132.0.11:37992"}}}}},"destination":{"address":"10.133.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4599220f9acf1dce0cfadaf999707f06bb9fc439482ba528d1e3dc261f7b4af8"},"headers":{":authority":"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-56c69a/ipp-route-56c69a/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-56c69a-kserve-workload-svc.ai-tenant-e2e-ipp-a-56c69a.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.59~e2e-ipp-a-56c69a-openshift-default-64d8d8549d-pxmfv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa"},"host":"e2e-ipp-a-56c69a.apps.5a0d808d-ffa7-4cd0-91c5-bc36ef6d24be.prod.konfluxeaas.com","id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","method":"POST","path":"/ai-tenant-e2e-ipp-a-56c69a/ipp-route-56c69a/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":964395091,"seconds":1785538503},"url_path":"/ai-tenant-e2e-ipp-a-56c69a/ipp-route-56c69a/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:37992","port":37992}}} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-56c69a/ipp-route-56c69a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-56c69a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-56c69a-sub"} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0e17c419-007e-48d0-9ea8-3166959f4d98","keyName":"e2e-ipp-56c69a","selected_subscription":"ipp-route-56c69a-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-56c69a/ipp-route-56c69a-sub@ai-tenant-e2e-ipp-a-56c69a/ipp-route-56c69a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-56c69a/models/facebook/opt-125m","name":"ipp-route-56c69a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-56c69a-sub","namespace":"ai-tenant-e2e-ipp-a-56c69a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-56c69a/ipp-route-56c69a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6174e91f-f1a3-42e2-a67c-832ed6d8b0fa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4599220f9acf1dce0cfadaf999707f06bb9fc439482ba528d1e3dc261f7b4af8"} {"level":"info","ts":"2026-07-31T22:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0841b0fd303fa882635c0835a1f12c75a4f6400c7357c19d558d0917ab71cb7"} {"level":"info","ts":"2026-07-31T22:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b5acb7cb66f34bed27f3ff9c2f709f6876e4af62edd2f31a2a01e1cd3a49b03"} {"level":"info","ts":"2026-07-31T22:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3b4872b8c4a3999a31b27ea065fe582f7ad01deeb2d33fd9d9718ddf3b8c21c"} {"level":"info","ts":"2026-07-31T22:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e442ea5959aa64c4126f06baed9d1f6ed3390a5176e6c9fe37d54a171401509a"} {"level":"info","ts":"2026-07-31T22:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c83e21834b6354fd023a9de3483ddecd92c44a97448742748e20d06441c315f8"} {"level":"info","ts":"2026-07-31T22:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b4fef4422d2dcf240ad1323f0aa2e72296c4eaa84f843251166858be0255d46"} {"level":"info","ts":"2026-07-31T22:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/147234599263153aadcff49e3c0446f99b9f91b70d21502ed857fdc6c1a0b068"} {"level":"info","ts":"2026-07-31T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99993bce57f3ad664c581de4f8baffb5620eb41f54092fa4f6e201be738599a9"} {"level":"info","ts":"2026-07-31T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7be6a31a7f934aaf3962592353032fd29331c90ad9d55da5fa548b6a9f8b5429"} {"level":"info","ts":"2026-07-31T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca76435819464bc286a823719afc77a4f1b7d6a03c30c918414347fe2e52598d"} {"level":"info","ts":"2026-07-31T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1a2f2add9b7520bf882aa5822d571e9ff00206d607695544debd3d17d7f71dd"}