{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c"}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507"}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507"}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"info","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46644","PortSpecifier":{"PortValue":46644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e16699a3-efcb-461b-bab9-afc356af6e72","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46644","PortSpecifier":{"PortValue":46644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654037,"nanos":680924031},"http":{"id":"e16699a3-efcb-461b-bab9-afc356af6e72","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d20c996-a60d-4185-951f-2106d66dd055","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:36004","PortSpecifier":{"PortValue":36004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d20c996-a60d-4185-951f-2106d66dd055","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d20c996-a60d-4185-951f-2106d66dd055","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:36004","PortSpecifier":{"PortValue":36004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654037,"nanos":723088944},"http":{"id":"0d20c996-a60d-4185-951f-2106d66dd055","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d20c996-a60d-4185-951f-2106d66dd055","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d20c996-a60d-4185-951f-2106d66dd055","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d20c996-a60d-4185-951f-2106d66dd055","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d20c996-a60d-4185-951f-2106d66dd055","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46652","PortSpecifier":{"PortValue":46652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","method":"POST","path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46652","PortSpecifier":{"PortValue":46652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654037,"nanos":764702460},"http":{"id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11co5DjjXTMYOKRYc_QFhSwUzjvEBBpvPwle12rpvYSckoHyqGdINwzJLBXG4"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11co5DjjXTMYOKRYc_QFhSwUzjvEBBpvPwle12rpvYSckoHyqGdINwzJLBXG4\"}"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3519a774-17c9-418c-a6fe-3b5448a40a89","keyName":"e2e-rate-a-251243","subscription":"e2e-rate-iso-a-251243","tenant":"e2e-shared-a-f42020","userId":"3519a774-17c9-418c-a6fe-3b5448a40a89","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\",\"requestedSubscription\":\"e2e-rate-iso-a-251243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-251243","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-251243"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3519a774-17c9-418c-a6fe-3b5448a40a89","keyName":"e2e-rate-a-251243","selected_subscription":"e2e-rate-iso-a-251243","selected_subscription_key":"ai-tenant-e2e-shared-a-f42020/e2e-rate-iso-a-251243@ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-251243","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46666","PortSpecifier":{"PortValue":46666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","method":"POST","path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46666","PortSpecifier":{"PortValue":46666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654038,"nanos":825784875},"http":{"id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11co5DjjXTMYOKRYc_QFhSwUzjvEBBpvPwle12rpvYSckoHyqGdINwzJLBXG4"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11co5DjjXTMYOKRYc_QFhSwUzjvEBBpvPwle12rpvYSckoHyqGdINwzJLBXG4\"}"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3519a774-17c9-418c-a6fe-3b5448a40a89","keyName":"e2e-rate-a-251243","subscription":"e2e-rate-iso-a-251243","tenant":"e2e-shared-a-f42020","userId":"3519a774-17c9-418c-a6fe-3b5448a40a89","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\",\"requestedSubscription\":\"e2e-rate-iso-a-251243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-251243","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-251243"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3519a774-17c9-418c-a6fe-3b5448a40a89","keyName":"e2e-rate-a-251243","selected_subscription":"e2e-rate-iso-a-251243","selected_subscription_key":"ai-tenant-e2e-shared-a-f42020/e2e-rate-iso-a-251243@ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-251243","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46682","PortSpecifier":{"PortValue":46682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","method":"POST","path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46682","PortSpecifier":{"PortValue":46682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654039,"nanos":866794561},"http":{"id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11co5DjjXTMYOKRYc_QFhSwUzjvEBBpvPwle12rpvYSckoHyqGdINwzJLBXG4"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11co5DjjXTMYOKRYc_QFhSwUzjvEBBpvPwle12rpvYSckoHyqGdINwzJLBXG4\"}"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3519a774-17c9-418c-a6fe-3b5448a40a89","keyName":"e2e-rate-a-251243","subscription":"e2e-rate-iso-a-251243","tenant":"e2e-shared-a-f42020","userId":"3519a774-17c9-418c-a6fe-3b5448a40a89","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\",\"requestedSubscription\":\"e2e-rate-iso-a-251243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-251243","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-251243"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3519a774-17c9-418c-a6fe-3b5448a40a89","keyName":"e2e-rate-a-251243","selected_subscription":"e2e-rate-iso-a-251243","selected_subscription_key":"ai-tenant-e2e-shared-a-f42020/e2e-rate-iso-a-251243@ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-251243","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52258","PortSpecifier":{"PortValue":52258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de233070-7b12-4842-8cd9-b4e7f9176bed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52258","PortSpecifier":{"PortValue":52258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654052,"nanos":798994473},"http":{"id":"de233070-7b12-4842-8cd9-b4e7f9176bed","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:37364","PortSpecifier":{"PortValue":37364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4b7153c-84fe-4406-b16a-e4df2f150843","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:37364","PortSpecifier":{"PortValue":37364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654052,"nanos":840671120},"http":{"id":"e4b7153c-84fe-4406-b16a-e4df2f150843","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52266","PortSpecifier":{"PortValue":52266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bac6eeac-9f84-4090-9679-dec988d44dae","method":"POST","path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52266","PortSpecifier":{"PortValue":52266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654052,"nanos":884756076},"http":{"id":"bac6eeac-9f84-4090-9679-dec988d44dae","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15yWav6fUr13UlxUZ_aeaDDYJ17nesd8vj9747VkZnM5C9tl49gOBS3saIKOa"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15yWav6fUr13UlxUZ_aeaDDYJ17nesd8vj9747VkZnM5C9tl49gOBS3saIKOa\"}"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a09caa3-839d-445a-b432-0954d508e880","keyName":"e2e-rate-a-0a27a0","subscription":"e2e-rate-iso-a-0a27a0","tenant":"e2e-shared-a-f42020","userId":"8a09caa3-839d-445a-b432-0954d508e880","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\",\"requestedSubscription\":\"e2e-rate-iso-a-0a27a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a27a0","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0a27a0"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8a09caa3-839d-445a-b432-0954d508e880","keyName":"e2e-rate-a-0a27a0","selected_subscription":"e2e-rate-iso-a-0a27a0","selected_subscription_key":"ai-tenant-e2e-shared-a-f42020/e2e-rate-iso-a-0a27a0@ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a27a0","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52282","PortSpecifier":{"PortValue":52282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67a81000-8b59-451b-b928-1bafdbed54f7","method":"POST","path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52282","PortSpecifier":{"PortValue":52282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654053,"nanos":948512409},"http":{"id":"67a81000-8b59-451b-b928-1bafdbed54f7","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15yWav6fUr13UlxUZ_aeaDDYJ17nesd8vj9747VkZnM5C9tl49gOBS3saIKOa"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15yWav6fUr13UlxUZ_aeaDDYJ17nesd8vj9747VkZnM5C9tl49gOBS3saIKOa\"}"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a09caa3-839d-445a-b432-0954d508e880","keyName":"e2e-rate-a-0a27a0","subscription":"e2e-rate-iso-a-0a27a0","tenant":"e2e-shared-a-f42020","userId":"8a09caa3-839d-445a-b432-0954d508e880","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\",\"requestedSubscription\":\"e2e-rate-iso-a-0a27a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a27a0","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0a27a0"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8a09caa3-839d-445a-b432-0954d508e880","keyName":"e2e-rate-a-0a27a0","selected_subscription":"e2e-rate-iso-a-0a27a0","selected_subscription_key":"ai-tenant-e2e-shared-a-f42020/e2e-rate-iso-a-0a27a0@ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a27a0","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52292","PortSpecifier":{"PortValue":52292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","method":"POST","path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52292","PortSpecifier":{"PortValue":52292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654054,"nanos":987962691},"http":{"id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15yWav6fUr13UlxUZ_aeaDDYJ17nesd8vj9747VkZnM5C9tl49gOBS3saIKOa"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15yWav6fUr13UlxUZ_aeaDDYJ17nesd8vj9747VkZnM5C9tl49gOBS3saIKOa\"}"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a09caa3-839d-445a-b432-0954d508e880","keyName":"e2e-rate-a-0a27a0","subscription":"e2e-rate-iso-a-0a27a0","tenant":"e2e-shared-a-f42020","userId":"8a09caa3-839d-445a-b432-0954d508e880","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\",\"requestedSubscription\":\"e2e-rate-iso-a-0a27a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a27a0","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0a27a0"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8a09caa3-839d-445a-b432-0954d508e880","keyName":"e2e-rate-a-0a27a0","selected_subscription":"e2e-rate-iso-a-0a27a0","selected_subscription_key":"ai-tenant-e2e-shared-a-f42020/e2e-rate-iso-a-0a27a0@ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a27a0","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:37374","PortSpecifier":{"PortValue":37374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c4753d5-fa91-4f83-9d15-73b727491f15","method":"POST","path":"/ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5/v1/completions","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:37374","PortSpecifier":{"PortValue":37374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654055,"nanos":26936450},"http":{"id":"8c4753d5-fa91-4f83-9d15-73b727491f15","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FQ2WVq8K9TxKBovH_RcaIMuPIifqjfZue1ykYzdaqOXk8kJK1Iiuva0nfw11"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FQ2WVq8K9TxKBovH_RcaIMuPIifqjfZue1ykYzdaqOXk8kJK1Iiuva0nfw11\"}"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"177f5935-3623-4ecb-91fa-61aa462d0bee","keyName":"e2e-rate-b-0a27a0","subscription":"e2e-rate-iso-b-0a27a0","tenant":"e2e-shared-b-45a5a5","userId":"177f5935-3623-4ecb-91fa-61aa462d0bee","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5\",\"requestedSubscription\":\"e2e-rate-iso-b-0a27a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45a5a5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0a27a0","namespace":"ai-tenant-e2e-shared-b-45a5a5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-0a27a0"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"177f5935-3623-4ecb-91fa-61aa462d0bee","keyName":"e2e-rate-b-0a27a0","selected_subscription":"e2e-rate-iso-b-0a27a0","selected_subscription_key":"ai-tenant-e2e-shared-b-45a5a5/e2e-rate-iso-b-0a27a0@ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45a5a5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0a27a0","namespace":"ai-tenant-e2e-shared-b-45a5a5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"info","ts":"2026-07-10T03:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507"}
{"level":"info","ts":"2026-07-10T03:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49"}
{"level":"info","ts":"2026-07-10T03:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"}
{"level":"info","ts":"2026-07-10T03:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"}
{"level":"info","ts":"2026-07-10T03:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2"}
{"level":"info","ts":"2026-07-10T03:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"}
{"level":"info","ts":"2026-07-10T03:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67"}
{"level":"info","ts":"2026-07-10T03:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed"}
{"level":"info","ts":"2026-07-10T03:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"}
{"level":"info","ts":"2026-07-10T03:28:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b"}
{"level":"info","ts":"2026-07-10T03:28:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}