{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"error","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505"}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505"}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff"}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf"}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40294","PortSpecifier":{"PortValue":40294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40294","PortSpecifier":{"PortValue":40294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380422,"nanos":650665114},"http":{"id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42068","PortSpecifier":{"PortValue":42068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e04c5e32-011f-4caf-8938-52ea269c4653","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42068","PortSpecifier":{"PortValue":42068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380422,"nanos":698390427},"http":{"id":"e04c5e32-011f-4caf-8938-52ea269c4653","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40306","PortSpecifier":{"PortValue":40306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","method":"POST","path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40306","PortSpecifier":{"PortValue":40306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380422,"nanos":757678649},"http":{"id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17fsWxqjl1AIp8HED_LDACZm9mIXyi4ao2gpapjTzTIes4zOUK99BAYLaDnyE"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17fsWxqjl1AIp8HED_LDACZm9mIXyi4ao2gpapjTzTIes4zOUK99BAYLaDnyE\"}"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","keyName":"e2e-rate-a-dfd788","subscription":"e2e-rate-iso-a-dfd788","tenant":"e2e-shared-a-2cc96a","userId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\",\"requestedSubscription\":\"e2e-rate-iso-a-dfd788\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dfd788","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dfd788"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","keyName":"e2e-rate-a-dfd788","selected_subscription":"e2e-rate-iso-a-dfd788","selected_subscription_key":"ai-tenant-e2e-shared-a-2cc96a/e2e-rate-iso-a-dfd788@ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dfd788","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40322","PortSpecifier":{"PortValue":40322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","method":"POST","path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40322","PortSpecifier":{"PortValue":40322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380423,"nanos":816655762},"http":{"id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17fsWxqjl1AIp8HED_LDACZm9mIXyi4ao2gpapjTzTIes4zOUK99BAYLaDnyE"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17fsWxqjl1AIp8HED_LDACZm9mIXyi4ao2gpapjTzTIes4zOUK99BAYLaDnyE\"}"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","keyName":"e2e-rate-a-dfd788","subscription":"e2e-rate-iso-a-dfd788","tenant":"e2e-shared-a-2cc96a","userId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\",\"requestedSubscription\":\"e2e-rate-iso-a-dfd788\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dfd788","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dfd788"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","keyName":"e2e-rate-a-dfd788","selected_subscription":"e2e-rate-iso-a-dfd788","selected_subscription_key":"ai-tenant-e2e-shared-a-2cc96a/e2e-rate-iso-a-dfd788@ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dfd788","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40336","PortSpecifier":{"PortValue":40336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","method":"POST","path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40336","PortSpecifier":{"PortValue":40336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380424,"nanos":855663659},"http":{"id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17fsWxqjl1AIp8HED_LDACZm9mIXyi4ao2gpapjTzTIes4zOUK99BAYLaDnyE"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17fsWxqjl1AIp8HED_LDACZm9mIXyi4ao2gpapjTzTIes4zOUK99BAYLaDnyE\"}"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","keyName":"e2e-rate-a-dfd788","subscription":"e2e-rate-iso-a-dfd788","tenant":"e2e-shared-a-2cc96a","userId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\",\"requestedSubscription\":\"e2e-rate-iso-a-dfd788\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dfd788","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dfd788"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","keyName":"e2e-rate-a-dfd788","selected_subscription":"e2e-rate-iso-a-dfd788","selected_subscription_key":"ai-tenant-e2e-shared-a-2cc96a/e2e-rate-iso-a-dfd788@ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dfd788","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49448","PortSpecifier":{"PortValue":49448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49448","PortSpecifier":{"PortValue":49448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380437,"nanos":642813760},"http":{"id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54468","PortSpecifier":{"PortValue":54468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54468","PortSpecifier":{"PortValue":54468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380437,"nanos":681021955},"http":{"id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49458","PortSpecifier":{"PortValue":49458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","method":"POST","path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49458","PortSpecifier":{"PortValue":49458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380437,"nanos":718916375},"http":{"id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YoA4Wa7uCLstnJAJ_tMzOfvi1EOmCTmp3mbP7sU1ty9sLF4mqzvkrOUdv44P"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YoA4Wa7uCLstnJAJ_tMzOfvi1EOmCTmp3mbP7sU1ty9sLF4mqzvkrOUdv44P\"}"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","keyName":"e2e-rate-a-11e59e","subscription":"e2e-rate-iso-a-11e59e","tenant":"e2e-shared-a-2cc96a","userId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\",\"requestedSubscription\":\"e2e-rate-iso-a-11e59e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11e59e","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-11e59e"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","keyName":"e2e-rate-a-11e59e","selected_subscription":"e2e-rate-iso-a-11e59e","selected_subscription_key":"ai-tenant-e2e-shared-a-2cc96a/e2e-rate-iso-a-11e59e@ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11e59e","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49464","PortSpecifier":{"PortValue":49464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","method":"POST","path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49464","PortSpecifier":{"PortValue":49464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380438,"nanos":752613918},"http":{"id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YoA4Wa7uCLstnJAJ_tMzOfvi1EOmCTmp3mbP7sU1ty9sLF4mqzvkrOUdv44P"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YoA4Wa7uCLstnJAJ_tMzOfvi1EOmCTmp3mbP7sU1ty9sLF4mqzvkrOUdv44P\"}"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","keyName":"e2e-rate-a-11e59e","subscription":"e2e-rate-iso-a-11e59e","tenant":"e2e-shared-a-2cc96a","userId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\",\"requestedSubscription\":\"e2e-rate-iso-a-11e59e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11e59e","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-11e59e"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","keyName":"e2e-rate-a-11e59e","selected_subscription":"e2e-rate-iso-a-11e59e","selected_subscription_key":"ai-tenant-e2e-shared-a-2cc96a/e2e-rate-iso-a-11e59e@ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11e59e","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49476","PortSpecifier":{"PortValue":49476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3e7b123-e372-460c-aed9-f3aeba10e540","method":"POST","path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49476","PortSpecifier":{"PortValue":49476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380439,"nanos":788500100},"http":{"id":"f3e7b123-e372-460c-aed9-f3aeba10e540","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YoA4Wa7uCLstnJAJ_tMzOfvi1EOmCTmp3mbP7sU1ty9sLF4mqzvkrOUdv44P"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YoA4Wa7uCLstnJAJ_tMzOfvi1EOmCTmp3mbP7sU1ty9sLF4mqzvkrOUdv44P\"}"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","keyName":"e2e-rate-a-11e59e","subscription":"e2e-rate-iso-a-11e59e","tenant":"e2e-shared-a-2cc96a","userId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\",\"requestedSubscription\":\"e2e-rate-iso-a-11e59e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11e59e","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-11e59e"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","keyName":"e2e-rate-a-11e59e","selected_subscription":"e2e-rate-iso-a-11e59e","selected_subscription_key":"ai-tenant-e2e-shared-a-2cc96a/e2e-rate-iso-a-11e59e@ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11e59e","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54470","PortSpecifier":{"PortValue":54470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","method":"POST","path":"/ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b/v1/completions","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54470","PortSpecifier":{"PortValue":54470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380439,"nanos":821614977},"http":{"id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sfYdZ3w0AzzBmES2_r0BKMJeXLB424DoHgSF6yBhz02wuvwQITUjLXzVNarB"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sfYdZ3w0AzzBmES2_r0BKMJeXLB424DoHgSF6yBhz02wuvwQITUjLXzVNarB\"}"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d4b65989-a020-4326-a523-242cc3ecc5c6","keyName":"e2e-rate-b-11e59e","subscription":"e2e-rate-iso-b-11e59e","tenant":"e2e-shared-b-ca352b","userId":"d4b65989-a020-4326-a523-242cc3ecc5c6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b\",\"requestedSubscription\":\"e2e-rate-iso-b-11e59e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ca352b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-11e59e","namespace":"ai-tenant-e2e-shared-b-ca352b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-11e59e"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d4b65989-a020-4326-a523-242cc3ecc5c6","keyName":"e2e-rate-b-11e59e","selected_subscription":"e2e-rate-iso-b-11e59e","selected_subscription_key":"ai-tenant-e2e-shared-b-ca352b/e2e-rate-iso-b-11e59e@ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ca352b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-11e59e","namespace":"ai-tenant-e2e-shared-b-ca352b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf"}
{"level":"info","ts":"2026-07-06T23:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"info","ts":"2026-07-06T23:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff"}
{"level":"info","ts":"2026-07-06T23:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"}