{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"error","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751"}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751"}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751"}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"}
{"level":"error","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287"}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53"}
{"level":"info","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49546","PortSpecifier":{"PortValue":49546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49546","PortSpecifier":{"PortValue":49546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053061,"nanos":278389743},"http":{"id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46040","PortSpecifier":{"PortValue":46040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46040","PortSpecifier":{"PortValue":46040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053061,"nanos":320149322},"http":{"id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49558","PortSpecifier":{"PortValue":49558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","method":"POST","path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49558","PortSpecifier":{"PortValue":49558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053061,"nanos":363583369},"http":{"id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ie2YBwGKuotrgIQX_dVapxgkTQI6aJbMgmSNV9U88RHajo9lMv8V4v3tuc7u"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ie2YBwGKuotrgIQX_dVapxgkTQI6aJbMgmSNV9U88RHajo9lMv8V4v3tuc7u\"}"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f655f390-8477-4f58-989d-32fcb118b4a2","keyName":"e2e-rate-a-a4d500","subscription":"e2e-rate-iso-a-a4d500","tenant":"e2e-shared-a-aa324e","userId":"f655f390-8477-4f58-989d-32fcb118b4a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\",\"requestedSubscription\":\"e2e-rate-iso-a-a4d500\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a4d500","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a4d500"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f655f390-8477-4f58-989d-32fcb118b4a2","keyName":"e2e-rate-a-a4d500","selected_subscription":"e2e-rate-iso-a-a4d500","selected_subscription_key":"ai-tenant-e2e-shared-a-aa324e/e2e-rate-iso-a-a4d500@ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a4d500","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c47d6368-0504-475a-a871-5b8e97369db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49562","PortSpecifier":{"PortValue":49562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c47d6368-0504-475a-a871-5b8e97369db1","method":"POST","path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c47d6368-0504-475a-a871-5b8e97369db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49562","PortSpecifier":{"PortValue":49562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053062,"nanos":421394401},"http":{"id":"c47d6368-0504-475a-a871-5b8e97369db1","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ie2YBwGKuotrgIQX_dVapxgkTQI6aJbMgmSNV9U88RHajo9lMv8V4v3tuc7u"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ie2YBwGKuotrgIQX_dVapxgkTQI6aJbMgmSNV9U88RHajo9lMv8V4v3tuc7u\"}"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f655f390-8477-4f58-989d-32fcb118b4a2","keyName":"e2e-rate-a-a4d500","subscription":"e2e-rate-iso-a-a4d500","tenant":"e2e-shared-a-aa324e","userId":"f655f390-8477-4f58-989d-32fcb118b4a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\",\"requestedSubscription\":\"e2e-rate-iso-a-a4d500\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a4d500","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c47d6368-0504-475a-a871-5b8e97369db1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a4d500"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f655f390-8477-4f58-989d-32fcb118b4a2","keyName":"e2e-rate-a-a4d500","selected_subscription":"e2e-rate-iso-a-a4d500","selected_subscription_key":"ai-tenant-e2e-shared-a-aa324e/e2e-rate-iso-a-a4d500@ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a4d500","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c47d6368-0504-475a-a871-5b8e97369db1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c47d6368-0504-475a-a871-5b8e97369db1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae9de893-55eb-42a7-94ce-095fded86816","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55090","PortSpecifier":{"PortValue":55090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae9de893-55eb-42a7-94ce-095fded86816","method":"POST","path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae9de893-55eb-42a7-94ce-095fded86816","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55090","PortSpecifier":{"PortValue":55090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053063,"nanos":463414727},"http":{"id":"ae9de893-55eb-42a7-94ce-095fded86816","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ie2YBwGKuotrgIQX_dVapxgkTQI6aJbMgmSNV9U88RHajo9lMv8V4v3tuc7u"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ie2YBwGKuotrgIQX_dVapxgkTQI6aJbMgmSNV9U88RHajo9lMv8V4v3tuc7u\"}"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f655f390-8477-4f58-989d-32fcb118b4a2","keyName":"e2e-rate-a-a4d500","subscription":"e2e-rate-iso-a-a4d500","tenant":"e2e-shared-a-aa324e","userId":"f655f390-8477-4f58-989d-32fcb118b4a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\",\"requestedSubscription\":\"e2e-rate-iso-a-a4d500\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a4d500","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae9de893-55eb-42a7-94ce-095fded86816","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a4d500"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f655f390-8477-4f58-989d-32fcb118b4a2","keyName":"e2e-rate-a-a4d500","selected_subscription":"e2e-rate-iso-a-a4d500","selected_subscription_key":"ai-tenant-e2e-shared-a-aa324e/e2e-rate-iso-a-a4d500@ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a4d500","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae9de893-55eb-42a7-94ce-095fded86816","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae9de893-55eb-42a7-94ce-095fded86816","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32890","PortSpecifier":{"PortValue":32890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"528530f2-8cc9-40ac-939e-892433f4d0e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32890","PortSpecifier":{"PortValue":32890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053076,"nanos":346909946},"http":{"id":"528530f2-8cc9-40ac-939e-892433f4d0e5","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43092","PortSpecifier":{"PortValue":43092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43092","PortSpecifier":{"PortValue":43092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053076,"nanos":380446316},"http":{"id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32894","PortSpecifier":{"PortValue":32894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91361c51-e867-46bd-bf37-09ef0f31025d","method":"POST","path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32894","PortSpecifier":{"PortValue":32894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053076,"nanos":415441427},"http":{"id":"91361c51-e867-46bd-bf37-09ef0f31025d","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eAkr8Smy4p9AdOih_2WXVvG6Ef8ssEqdpPKItvIIaQ3OJ1p4ds37W5alvjaM"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eAkr8Smy4p9AdOih_2WXVvG6Ef8ssEqdpPKItvIIaQ3OJ1p4ds37W5alvjaM\"}"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","keyName":"e2e-rate-a-a8e6a0","subscription":"e2e-rate-iso-a-a8e6a0","tenant":"e2e-shared-a-aa324e","userId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8e6a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8e6a0","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8e6a0"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","keyName":"e2e-rate-a-a8e6a0","selected_subscription":"e2e-rate-iso-a-a8e6a0","selected_subscription_key":"ai-tenant-e2e-shared-a-aa324e/e2e-rate-iso-a-a8e6a0@ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8e6a0","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32906","PortSpecifier":{"PortValue":32906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","method":"POST","path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32906","PortSpecifier":{"PortValue":32906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053077,"nanos":454836398},"http":{"id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eAkr8Smy4p9AdOih_2WXVvG6Ef8ssEqdpPKItvIIaQ3OJ1p4ds37W5alvjaM"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eAkr8Smy4p9AdOih_2WXVvG6Ef8ssEqdpPKItvIIaQ3OJ1p4ds37W5alvjaM\"}"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","keyName":"e2e-rate-a-a8e6a0","subscription":"e2e-rate-iso-a-a8e6a0","tenant":"e2e-shared-a-aa324e","userId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8e6a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8e6a0","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8e6a0"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","keyName":"e2e-rate-a-a8e6a0","selected_subscription":"e2e-rate-iso-a-a8e6a0","selected_subscription_key":"ai-tenant-e2e-shared-a-aa324e/e2e-rate-iso-a-a8e6a0@ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8e6a0","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32910","PortSpecifier":{"PortValue":32910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","method":"POST","path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32910","PortSpecifier":{"PortValue":32910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053078,"nanos":490310707},"http":{"id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eAkr8Smy4p9AdOih_2WXVvG6Ef8ssEqdpPKItvIIaQ3OJ1p4ds37W5alvjaM"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eAkr8Smy4p9AdOih_2WXVvG6Ef8ssEqdpPKItvIIaQ3OJ1p4ds37W5alvjaM\"}"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","keyName":"e2e-rate-a-a8e6a0","subscription":"e2e-rate-iso-a-a8e6a0","tenant":"e2e-shared-a-aa324e","userId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8e6a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8e6a0","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8e6a0"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","keyName":"e2e-rate-a-a8e6a0","selected_subscription":"e2e-rate-iso-a-a8e6a0","selected_subscription_key":"ai-tenant-e2e-shared-a-aa324e/e2e-rate-iso-a-a8e6a0@ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8e6a0","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43108","PortSpecifier":{"PortValue":43108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","method":"POST","path":"/ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7/v1/completions","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43108","PortSpecifier":{"PortValue":43108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053078,"nanos":525299861},"http":{"id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ap3j3VSoQ8r6S7z6_Pup7RVPkdXlEYOSuTzJf1zmYBpsNA0o5uDxOhIjP7CO"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ap3j3VSoQ8r6S7z6_Pup7RVPkdXlEYOSuTzJf1zmYBpsNA0o5uDxOhIjP7CO\"}"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c833532d-9dcc-4909-84ad-b2a8f2616925","keyName":"e2e-rate-b-a8e6a0","subscription":"e2e-rate-iso-b-a8e6a0","tenant":"e2e-shared-b-877bd7","userId":"c833532d-9dcc-4909-84ad-b2a8f2616925","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7\",\"requestedSubscription\":\"e2e-rate-iso-b-a8e6a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-877bd7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a8e6a0","namespace":"ai-tenant-e2e-shared-b-877bd7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a8e6a0"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c833532d-9dcc-4909-84ad-b2a8f2616925","keyName":"e2e-rate-b-a8e6a0","selected_subscription":"e2e-rate-iso-b-a8e6a0","selected_subscription_key":"ai-tenant-e2e-shared-b-877bd7/e2e-rate-iso-b-a8e6a0@ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-877bd7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a8e6a0","namespace":"ai-tenant-e2e-shared-b-877bd7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"info","ts":"2026-07-14T18:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"}
{"level":"info","ts":"2026-07-14T18:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287"}
{"level":"info","ts":"2026-07-14T18:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"info","ts":"2026-07-14T18:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c"}
{"level":"info","ts":"2026-07-14T18:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"}
{"level":"info","ts":"2026-07-14T18:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831"}