--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175f30af1a78b47ac03dec2a0c9a66869f94295ae5ae85a9b7af521d73fb70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb3552627c148e49233e5e9f4e226f6d613e4363bf0f96046c3905d7e074f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecd873626a01cc268abe70bbbe5895c8935ae15eb3a6019751a1fc84dc68e862"}
{"level":"info","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb3552627c148e49233e5e9f4e226f6d613e4363bf0f96046c3905d7e074f94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5d0a40c9981e37d993ea9e59d62f00a037177b3af4ce3fde1fb9e970312b7ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175f30af1a78b47ac03dec2a0c9a66869f94295ae5ae85a9b7af521d73fb70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb3552627c148e49233e5e9f4e226f6d613e4363bf0f96046c3905d7e074f94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb3552627c148e49233e5e9f4e226f6d613e4363bf0f96046c3905d7e074f94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175f30af1a78b47ac03dec2a0c9a66869f94295ae5ae85a9b7af521d73fb70af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e88583330caa41838e97a7ac1ed4a620720d7bf4bea66cf93029c5e49c6963e"}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb3552627c148e49233e5e9f4e226f6d613e4363bf0f96046c3905d7e074f94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175f30af1a78b47ac03dec2a0c9a66869f94295ae5ae85a9b7af521d73fb70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175f30af1a78b47ac03dec2a0c9a66869f94295ae5ae85a9b7af521d73fb70af"}
{"level":"info","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175f30af1a78b47ac03dec2a0c9a66869f94295ae5ae85a9b7af521d73fb70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175f30af1a78b47ac03dec2a0c9a66869f94295ae5ae85a9b7af521d73fb70af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["175f30af1a78b47ac03dec2a0c9a66869f94295ae5ae85a9b7af521d73fb70af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb3552627c148e49233e5e9f4e226f6d613e4363bf0f96046c3905d7e074f94"}
{"level":"info","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175f30af1a78b47ac03dec2a0c9a66869f94295ae5ae85a9b7af521d73fb70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb3552627c148e49233e5e9f4e226f6d613e4363bf0f96046c3905d7e074f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb3552627c148e49233e5e9f4e226f6d613e4363bf0f96046c3905d7e074f94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"}
{"level":"info","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb3552627c148e49233e5e9f4e226f6d613e4363bf0f96046c3905d7e074f94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175f30af1a78b47ac03dec2a0c9a66869f94295ae5ae85a9b7af521d73fb70af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb3552627c148e49233e5e9f4e226f6d613e4363bf0f96046c3905d7e074f94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175f30af1a78b47ac03dec2a0c9a66869f94295ae5ae85a9b7af521d73fb70af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5d0a40c9981e37d993ea9e59d62f00a037177b3af4ce3fde1fb9e970312b7ae"}
{"level":"info","ts":"2026-07-10T14:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175f30af1a78b47ac03dec2a0c9a66869f94295ae5ae85a9b7af521d73fb70af"}
{"level":"info","ts":"2026-07-10T14:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb3552627c148e49233e5e9f4e226f6d613e4363bf0f96046c3905d7e074f94"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d8302ce353985c5306e7d007a639443be672ae4d241e9e8d4f3fc045c86ed31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d8302ce353985c5306e7d007a639443be672ae4d241e9e8d4f3fc045c86ed31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d8302ce353985c5306e7d007a639443be672ae4d241e9e8d4f3fc045c86ed31"}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d8302ce353985c5306e7d007a639443be672ae4d241e9e8d4f3fc045c86ed31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d8302ce353985c5306e7d007a639443be672ae4d241e9e8d4f3fc045c86ed31"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d8302ce353985c5306e7d007a639443be672ae4d241e9e8d4f3fc045c86ed31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d8302ce353985c5306e7d007a639443be672ae4d241e9e8d4f3fc045c86ed31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d8302ce353985c5306e7d007a639443be672ae4d241e9e8d4f3fc045c86ed31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d8302ce353985c5306e7d007a639443be672ae4d241e9e8d4f3fc045c86ed31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d8302ce353985c5306e7d007a639443be672ae4d241e9e8d4f3fc045c86ed31"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be0243d168b3ae2fcd09bf49d8da6a288b2a66905b0cc0a261b2d46f31115f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be0243d168b3ae2fcd09bf49d8da6a288b2a66905b0cc0a261b2d46f31115f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be0243d168b3ae2fcd09bf49d8da6a288b2a66905b0cc0a261b2d46f31115f7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be0243d168b3ae2fcd09bf49d8da6a288b2a66905b0cc0a261b2d46f31115f7f"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be0243d168b3ae2fcd09bf49d8da6a288b2a66905b0cc0a261b2d46f31115f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be0243d168b3ae2fcd09bf49d8da6a288b2a66905b0cc0a261b2d46f31115f7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be0243d168b3ae2fcd09bf49d8da6a288b2a66905b0cc0a261b2d46f31115f7f"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be0243d168b3ae2fcd09bf49d8da6a288b2a66905b0cc0a261b2d46f31115f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be0243d168b3ae2fcd09bf49d8da6a288b2a66905b0cc0a261b2d46f31115f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0"}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be0243d168b3ae2fcd09bf49d8da6a288b2a66905b0cc0a261b2d46f31115f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be0243d168b3ae2fcd09bf49d8da6a288b2a66905b0cc0a261b2d46f31115f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0"}
{"level":"debug","ts":"2026-07-10T14:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be0243d168b3ae2fcd09bf49d8da6a288b2a66905b0cc0a261b2d46f31115f7f"}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0"}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0"}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0"}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50c52cc2ea8c50d493433896288ada600ad51770f5d54e5ba4a62c7079d6cde8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50c52cc2ea8c50d493433896288ada600ad51770f5d54e5ba4a62c7079d6cde8"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50c52cc2ea8c50d493433896288ada600ad51770f5d54e5ba4a62c7079d6cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50c52cc2ea8c50d493433896288ada600ad51770f5d54e5ba4a62c7079d6cde8"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50c52cc2ea8c50d493433896288ada600ad51770f5d54e5ba4a62c7079d6cde8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50c52cc2ea8c50d493433896288ada600ad51770f5d54e5ba4a62c7079d6cde8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50c52cc2ea8c50d493433896288ada600ad51770f5d54e5ba4a62c7079d6cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50c52cc2ea8c50d493433896288ada600ad51770f5d54e5ba4a62c7079d6cde8"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50c52cc2ea8c50d493433896288ada600ad51770f5d54e5ba4a62c7079d6cde8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80332a3d3d69847b6cdb165560a1281f3979242de3342167e7d88947f2361cdc"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80332a3d3d69847b6cdb165560a1281f3979242de3342167e7d88947f2361cdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80332a3d3d69847b6cdb165560a1281f3979242de3342167e7d88947f2361cdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80332a3d3d69847b6cdb165560a1281f3979242de3342167e7d88947f2361cdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80332a3d3d69847b6cdb165560a1281f3979242de3342167e7d88947f2361cdc"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80332a3d3d69847b6cdb165560a1281f3979242de3342167e7d88947f2361cdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"}
{"level":"debug","ts":"2026-07-10T14:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233"}
{"level":"info","ts":"2026-07-10T14:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"}
{"level":"info","ts":"2026-07-10T14:42:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a5aa542-3554-45a3-a368-304e8044f7a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:38602","PortSpecifier":{"PortValue":38602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a5aa542-3554-45a3-a368-304e8044f7a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:42:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a5aa542-3554-45a3-a368-304e8044f7a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:38602","PortSpecifier":{"PortValue":38602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694575,"nanos":983506153},"http":{"id":"3a5aa542-3554-45a3-a368-304e8044f7a0","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:42:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3a5aa542-3554-45a3-a368-304e8044f7a0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:42:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a5aa542-3554-45a3-a368-304e8044f7a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a5aa542-3554-45a3-a368-304e8044f7a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a5aa542-3554-45a3-a368-304e8044f7a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a5aa542-3554-45a3-a368-304e8044f7a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a5aa542-3554-45a3-a368-304e8044f7a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/auth-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3a5aa542-3554-45a3-a368-304e8044f7a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a5aa542-3554-45a3-a368-304e8044f7a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a5aa542-3554-45a3-a368-304e8044f7a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T14:42:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a5aa542-3554-45a3-a368-304e8044f7a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:42:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a5aa542-3554-45a3-a368-304e8044f7a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44590","PortSpecifier":{"PortValue":44590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44590","PortSpecifier":{"PortValue":44590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694576,"nanos":43469854},"http":{"id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","method":"POST","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/auth-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5a2e9ac-aa1c-4ed6-8f47-f2faa4cc4319","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:38614","PortSpecifier":{"PortValue":38614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","method":"GET","path":"/maas-api/v1/api-keys/97d38165-34b6-426d-82a8-e6499b6474fa","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:38614","PortSpecifier":{"PortValue":38614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694576,"nanos":106798121},"http":{"id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","method":"GET","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/97d38165-34b6-426d-82a8-e6499b6474fa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/97d38165-34b6-426d-82a8-e6499b6474fa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/auth-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a35742a-eca5-45bf-9af8-d2d4829d8253","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2471c898-48a1-4603-b322-548f52eba9a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44600","PortSpecifier":{"PortValue":44600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2471c898-48a1-4603-b322-548f52eba9a1","method":"GET","path":"/maas-api/v1/api-keys/06ee10cc-ffda-4dac-b487-d8fdc900bfbd","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2471c898-48a1-4603-b322-548f52eba9a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44600","PortSpecifier":{"PortValue":44600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694576,"nanos":142420780},"http":{"id":"2471c898-48a1-4603-b322-548f52eba9a1","method":"GET","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/06ee10cc-ffda-4dac-b487-d8fdc900bfbd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2471c898-48a1-4603-b322-548f52eba9a1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2471c898-48a1-4603-b322-548f52eba9a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2471c898-48a1-4603-b322-548f52eba9a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/06ee10cc-ffda-4dac-b487-d8fdc900bfbd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2471c898-48a1-4603-b322-548f52eba9a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2471c898-48a1-4603-b322-548f52eba9a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2471c898-48a1-4603-b322-548f52eba9a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/auth-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2471c898-48a1-4603-b322-548f52eba9a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2471c898-48a1-4603-b322-548f52eba9a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2471c898-48a1-4603-b322-548f52eba9a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2471c898-48a1-4603-b322-548f52eba9a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:42:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2471c898-48a1-4603-b322-548f52eba9a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:35164","PortSpecifier":{"PortValue":35164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:35164","PortSpecifier":{"PortValue":35164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694593,"nanos":488854621},"http":{"id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/auth-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5e0368b-73d6-41f6-8d49-d1cffbf61166","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58cf3756-6a02-4bc8-ab3c-702898f03134","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:34098","PortSpecifier":{"PortValue":34098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58cf3756-6a02-4bc8-ab3c-702898f03134","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58cf3756-6a02-4bc8-ab3c-702898f03134","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:34098","PortSpecifier":{"PortValue":34098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694593,"nanos":527103637},"http":{"id":"58cf3756-6a02-4bc8-ab3c-702898f03134","method":"POST","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"58cf3756-6a02-4bc8-ab3c-702898f03134","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58cf3756-6a02-4bc8-ab3c-702898f03134","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58cf3756-6a02-4bc8-ab3c-702898f03134","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58cf3756-6a02-4bc8-ab3c-702898f03134","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58cf3756-6a02-4bc8-ab3c-702898f03134","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58cf3756-6a02-4bc8-ab3c-702898f03134","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/auth-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58cf3756-6a02-4bc8-ab3c-702898f03134","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58cf3756-6a02-4bc8-ab3c-702898f03134","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58cf3756-6a02-4bc8-ab3c-702898f03134","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58cf3756-6a02-4bc8-ab3c-702898f03134","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58cf3756-6a02-4bc8-ab3c-702898f03134","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:35176","PortSpecifier":{"PortValue":35176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:35176","PortSpecifier":{"PortValue":35176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694593,"nanos":565527124},"http":{"id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","method":"GET","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VNiskS7uFvZemVW6_off3O0IM1jEdN4OWZpOyOcTqRb9umCRGAOTi6k6jLb3"}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VNiskS7uFvZemVW6_off3O0IM1jEdN4OWZpOyOcTqRb9umCRGAOTi6k6jLb3\"}"}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6957adb1-4973-46c2-bd58-e00f09533b3a","keyName":"e2e-auth-iso-a-5ba531","subscription":"e2e-auth-iso-fc7fe6","tenant":"e2e-shared-a-9e5d79","userId":"6957adb1-4973-46c2-bd58-e00f09533b3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/auth-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-fc7fe6"}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:43:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c17d9859-951c-41a9-b4a7-d8fb1eb20003","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:53874","PortSpecifier":{"PortValue":53874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:53874","PortSpecifier":{"PortValue":53874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694608,"nanos":824566966},"http":{"id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/auth-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72ee5cf3-c870-488a-bc53-1c7514ff1d82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beb19678-a105-407d-8b57-7d588a8f6e27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:41004","PortSpecifier":{"PortValue":41004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"beb19678-a105-407d-8b57-7d588a8f6e27","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beb19678-a105-407d-8b57-7d588a8f6e27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:41004","PortSpecifier":{"PortValue":41004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694608,"nanos":866156698},"http":{"id":"beb19678-a105-407d-8b57-7d588a8f6e27","method":"POST","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"beb19678-a105-407d-8b57-7d588a8f6e27","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"beb19678-a105-407d-8b57-7d588a8f6e27","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"beb19678-a105-407d-8b57-7d588a8f6e27","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb19678-a105-407d-8b57-7d588a8f6e27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb19678-a105-407d-8b57-7d588a8f6e27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb19678-a105-407d-8b57-7d588a8f6e27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/auth-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"beb19678-a105-407d-8b57-7d588a8f6e27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb19678-a105-407d-8b57-7d588a8f6e27","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb19678-a105-407d-8b57-7d588a8f6e27","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beb19678-a105-407d-8b57-7d588a8f6e27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beb19678-a105-407d-8b57-7d588a8f6e27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e54d233-66f5-4829-8118-09fff0d25501","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:41014","PortSpecifier":{"PortValue":41014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e54d233-66f5-4829-8118-09fff0d25501","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e54d233-66f5-4829-8118-09fff0d25501","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:41014","PortSpecifier":{"PortValue":41014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694608,"nanos":906863117},"http":{"id":"3e54d233-66f5-4829-8118-09fff0d25501","method":"GET","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e54d233-66f5-4829-8118-09fff0d25501","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jr22ehqmtwSzIXdy_CjiTrmKcfX7wbaTMUTp3gX1bs1fEp4afAHHZuug8g4b"}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e54d233-66f5-4829-8118-09fff0d25501","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-feed7a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jr22ehqmtwSzIXdy_CjiTrmKcfX7wbaTMUTp3gX1bs1fEp4afAHHZuug8g4b\"}"}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e54d233-66f5-4829-8118-09fff0d25501","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-feed7a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e54d233-66f5-4829-8118-09fff0d25501","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e54d233-66f5-4829-8118-09fff0d25501","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"3e54d233-66f5-4829-8118-09fff0d25501","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e54d233-66f5-4829-8118-09fff0d25501","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-10T14:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e54d233-66f5-4829-8118-09fff0d25501","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37d12567-db26-4023-9f71-6d7708e10644","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:43718","PortSpecifier":{"PortValue":43718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37d12567-db26-4023-9f71-6d7708e10644","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37d12567-db26-4023-9f71-6d7708e10644","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:43718","PortSpecifier":{"PortValue":43718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694628,"nanos":314083598},"http":{"id":"37d12567-db26-4023-9f71-6d7708e10644","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37d12567-db26-4023-9f71-6d7708e10644","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37d12567-db26-4023-9f71-6d7708e10644","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37d12567-db26-4023-9f71-6d7708e10644","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d12567-db26-4023-9f71-6d7708e10644","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d12567-db26-4023-9f71-6d7708e10644","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d12567-db26-4023-9f71-6d7708e10644","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/auth-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37d12567-db26-4023-9f71-6d7708e10644","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37d12567-db26-4023-9f71-6d7708e10644","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37d12567-db26-4023-9f71-6d7708e10644","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37d12567-db26-4023-9f71-6d7708e10644","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37d12567-db26-4023-9f71-6d7708e10644","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:49490","PortSpecifier":{"PortValue":49490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:49490","PortSpecifier":{"PortValue":49490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694628,"nanos":350064843},"http":{"id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","method":"POST","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/auth-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e38ae9a-36d0-4d0e-935a-ed454fe2e2a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:43730","PortSpecifier":{"PortValue":43730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:43730","PortSpecifier":{"PortValue":43730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694628,"nanos":383907542},"http":{"id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/auth-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85b4e93b-add2-47e0-b97f-a7e1dd4ff529","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c0080ab-e253-413c-9193-d91829d9adc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:49494","PortSpecifier":{"PortValue":49494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c0080ab-e253-413c-9193-d91829d9adc1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c0080ab-e253-413c-9193-d91829d9adc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:49494","PortSpecifier":{"PortValue":49494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694628,"nanos":423049810},"http":{"id":"0c0080ab-e253-413c-9193-d91829d9adc1","method":"POST","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c0080ab-e253-413c-9193-d91829d9adc1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c0080ab-e253-413c-9193-d91829d9adc1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c0080ab-e253-413c-9193-d91829d9adc1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c0080ab-e253-413c-9193-d91829d9adc1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c0080ab-e253-413c-9193-d91829d9adc1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c0080ab-e253-413c-9193-d91829d9adc1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/auth-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c0080ab-e253-413c-9193-d91829d9adc1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c0080ab-e253-413c-9193-d91829d9adc1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c0080ab-e253-413c-9193-d91829d9adc1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c0080ab-e253-413c-9193-d91829d9adc1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c0080ab-e253-413c-9193-d91829d9adc1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"167d1903-0396-4ca6-9600-4b9a7156df85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:48674","PortSpecifier":{"PortValue":48674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"167d1903-0396-4ca6-9600-4b9a7156df85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"167d1903-0396-4ca6-9600-4b9a7156df85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:48674","PortSpecifier":{"PortValue":48674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694645,"nanos":837085450},"http":{"id":"167d1903-0396-4ca6-9600-4b9a7156df85","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"167d1903-0396-4ca6-9600-4b9a7156df85","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"167d1903-0396-4ca6-9600-4b9a7156df85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"167d1903-0396-4ca6-9600-4b9a7156df85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"167d1903-0396-4ca6-9600-4b9a7156df85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"167d1903-0396-4ca6-9600-4b9a7156df85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"167d1903-0396-4ca6-9600-4b9a7156df85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/auth-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"167d1903-0396-4ca6-9600-4b9a7156df85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"167d1903-0396-4ca6-9600-4b9a7156df85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"167d1903-0396-4ca6-9600-4b9a7156df85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"167d1903-0396-4ca6-9600-4b9a7156df85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"167d1903-0396-4ca6-9600-4b9a7156df85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78b5c069-df02-423c-9775-25409a152409","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:55972","PortSpecifier":{"PortValue":55972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78b5c069-df02-423c-9775-25409a152409","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78b5c069-df02-423c-9775-25409a152409","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:55972","PortSpecifier":{"PortValue":55972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694645,"nanos":879031061},"http":{"id":"78b5c069-df02-423c-9775-25409a152409","method":"POST","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78b5c069-df02-423c-9775-25409a152409","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78b5c069-df02-423c-9775-25409a152409","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78b5c069-df02-423c-9775-25409a152409","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78b5c069-df02-423c-9775-25409a152409","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78b5c069-df02-423c-9775-25409a152409","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78b5c069-df02-423c-9775-25409a152409","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/auth-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78b5c069-df02-423c-9775-25409a152409","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78b5c069-df02-423c-9775-25409a152409","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78b5c069-df02-423c-9775-25409a152409","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78b5c069-df02-423c-9775-25409a152409","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78b5c069-df02-423c-9775-25409a152409","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"feaa994e-eb79-4dad-b5c1-0041d178f788","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:55982","PortSpecifier":{"PortValue":55982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"feaa994e-eb79-4dad-b5c1-0041d178f788","method":"GET","path":"/maas-api/v1/api-keys/6a667ce2-359d-4490-bcf4-2282be3de5db","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"feaa994e-eb79-4dad-b5c1-0041d178f788","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:55982","PortSpecifier":{"PortValue":55982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694645,"nanos":917501998},"http":{"id":"feaa994e-eb79-4dad-b5c1-0041d178f788","method":"GET","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6a667ce2-359d-4490-bcf4-2282be3de5db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"feaa994e-eb79-4dad-b5c1-0041d178f788","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"feaa994e-eb79-4dad-b5c1-0041d178f788","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"feaa994e-eb79-4dad-b5c1-0041d178f788","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6a667ce2-359d-4490-bcf4-2282be3de5db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"feaa994e-eb79-4dad-b5c1-0041d178f788","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"feaa994e-eb79-4dad-b5c1-0041d178f788","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"feaa994e-eb79-4dad-b5c1-0041d178f788","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/auth-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"feaa994e-eb79-4dad-b5c1-0041d178f788","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"feaa994e-eb79-4dad-b5c1-0041d178f788","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"feaa994e-eb79-4dad-b5c1-0041d178f788","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"feaa994e-eb79-4dad-b5c1-0041d178f788","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"feaa994e-eb79-4dad-b5c1-0041d178f788","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5180acdb-46c1-4b76-88b4-bd8816603949","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:48678","PortSpecifier":{"PortValue":48678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5180acdb-46c1-4b76-88b4-bd8816603949","method":"GET","path":"/maas-api/v1/api-keys/6a667ce2-359d-4490-bcf4-2282be3de5db","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5180acdb-46c1-4b76-88b4-bd8816603949","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:48678","PortSpecifier":{"PortValue":48678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694645,"nanos":952270591},"http":{"id":"5180acdb-46c1-4b76-88b4-bd8816603949","method":"GET","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6a667ce2-359d-4490-bcf4-2282be3de5db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5180acdb-46c1-4b76-88b4-bd8816603949","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5180acdb-46c1-4b76-88b4-bd8816603949","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5180acdb-46c1-4b76-88b4-bd8816603949","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6a667ce2-359d-4490-bcf4-2282be3de5db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5180acdb-46c1-4b76-88b4-bd8816603949","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5180acdb-46c1-4b76-88b4-bd8816603949","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5180acdb-46c1-4b76-88b4-bd8816603949","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/auth-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5180acdb-46c1-4b76-88b4-bd8816603949","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5180acdb-46c1-4b76-88b4-bd8816603949","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5180acdb-46c1-4b76-88b4-bd8816603949","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5180acdb-46c1-4b76-88b4-bd8816603949","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5180acdb-46c1-4b76-88b4-bd8816603949","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"740c8d2b-c188-4843-987b-8748c71c7f69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:45322","PortSpecifier":{"PortValue":45322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"740c8d2b-c188-4843-987b-8748c71c7f69","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"740c8d2b-c188-4843-987b-8748c71c7f69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:45322","PortSpecifier":{"PortValue":45322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694663,"nanos":256726529},"http":{"id":"740c8d2b-c188-4843-987b-8748c71c7f69","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"740c8d2b-c188-4843-987b-8748c71c7f69","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"740c8d2b-c188-4843-987b-8748c71c7f69","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"740c8d2b-c188-4843-987b-8748c71c7f69","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"740c8d2b-c188-4843-987b-8748c71c7f69","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"740c8d2b-c188-4843-987b-8748c71c7f69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"740c8d2b-c188-4843-987b-8748c71c7f69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/auth-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"740c8d2b-c188-4843-987b-8748c71c7f69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"740c8d2b-c188-4843-987b-8748c71c7f69","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"740c8d2b-c188-4843-987b-8748c71c7f69","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"740c8d2b-c188-4843-987b-8748c71c7f69","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"740c8d2b-c188-4843-987b-8748c71c7f69","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dacc217-e7ab-46a5-9e76-606242fc0801","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:50186","PortSpecifier":{"PortValue":50186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7dacc217-e7ab-46a5-9e76-606242fc0801","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dacc217-e7ab-46a5-9e76-606242fc0801","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:50186","PortSpecifier":{"PortValue":50186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694663,"nanos":296021931},"http":{"id":"7dacc217-e7ab-46a5-9e76-606242fc0801","method":"POST","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7dacc217-e7ab-46a5-9e76-606242fc0801","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7dacc217-e7ab-46a5-9e76-606242fc0801","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7dacc217-e7ab-46a5-9e76-606242fc0801","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dacc217-e7ab-46a5-9e76-606242fc0801","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dacc217-e7ab-46a5-9e76-606242fc0801","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dacc217-e7ab-46a5-9e76-606242fc0801","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/auth-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7dacc217-e7ab-46a5-9e76-606242fc0801","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7dacc217-e7ab-46a5-9e76-606242fc0801","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7dacc217-e7ab-46a5-9e76-606242fc0801","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dacc217-e7ab-46a5-9e76-606242fc0801","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dacc217-e7ab-46a5-9e76-606242fc0801","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:45328","PortSpecifier":{"PortValue":45328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:45328","PortSpecifier":{"PortValue":45328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694663,"nanos":336182588},"http":{"id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dzmX6HdPjrHE2yCq_CAqBxWNhU7hQoWz7DbeDgKcPkmRMiwbJbyRNcn5B9Yx"}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dzmX6HdPjrHE2yCq_CAqBxWNhU7hQoWz7DbeDgKcPkmRMiwbJbyRNcn5B9Yx\"}"}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"118a9821-d6bb-4823-a1d3-d224d2b47d29","keyName":"e2e-auth-iso-a-73b1c7","subscription":"e2e-auth-iso-03558e","tenant":"e2e-shared-a-9e5d79","userId":"118a9821-d6bb-4823-a1d3-d224d2b47d29","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/auth-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-03558e"}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6b26f75-25ec-40f6-b675-bc7c3c610905","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0573af97702671a1950e118b736fb88f0d6a7273f9911cc6ea28e577897a31c"}
{"level":"info","ts":"2026-07-10T14:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7213ab4f497128225cef069df6c0d0ed8a625f7385fd5308e06b599cdbbb4d37"}
{"level":"info","ts":"2026-07-10T14:44:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0a336583786eda72469508b4428eeb97da71c516635937779556bbd6766fb9e"}
{"level":"info","ts":"2026-07-10T14:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5d0a40c9981e37d993ea9e59d62f00a037177b3af4ce3fde1fb9e970312b7ae"}
{"level":"info","ts":"2026-07-10T14:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/346a0d5d7ad274fc8e6e01f2a39f832ac86f4bf3e537537688a1e9650b5976ee"}
{"level":"info","ts":"2026-07-10T14:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e88583330caa41838e97a7ac1ed4a620720d7bf4bea66cf93029c5e49c6963e"}
{"level":"info","ts":"2026-07-10T14:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50c52cc2ea8c50d493433896288ada600ad51770f5d54e5ba4a62c7079d6cde8"}
{"level":"info","ts":"2026-07-10T14:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a43551e68d89870c4afb5beb4f73ae0681ddbda56071f4a04ae8863b5a0396e0"}
{"level":"info","ts":"2026-07-10T14:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb3552627c148e49233e5e9f4e226f6d613e4363bf0f96046c3905d7e074f94"}
{"level":"info","ts":"2026-07-10T14:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/175f30af1a78b47ac03dec2a0c9a66869f94295ae5ae85a9b7af521d73fb70af"}
{"level":"info","ts":"2026-07-10T14:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be0243d168b3ae2fcd09bf49d8da6a288b2a66905b0cc0a261b2d46f31115f7f"}
{"level":"info","ts":"2026-07-10T14:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d8302ce353985c5306e7d007a639443be672ae4d241e9e8d4f3fc045c86ed31"}
{"level":"info","ts":"2026-07-10T14:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4a22bef80037ddeac650cbe4252fbb8560c83afed4492910e0d92cfed08a233"}
{"level":"info","ts":"2026-07-10T14:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80332a3d3d69847b6cdb165560a1281f3979242de3342167e7d88947f2361cdc"}
{"level":"info","ts":"2026-07-10T14:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfe8f270be064ecfd9bdb3a54bfa8373fdcde5e341f2ef548351f39ceb0939de"}
{"level":"info","ts":"2026-07-10T14:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a310d2b48b20bb1499a6498f9efc577db69a96db34fa3fab5f4c5bcba91bc70e"}
{"level":"debug","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:44:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:44:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:44:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:44:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d"}
{"level":"info","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:44:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:44:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d"}
{"level":"info","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d"}
{"level":"debug","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:44:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:44:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d"}
{"level":"debug","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:44:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:44:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636"}
{"level":"debug","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636"}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636"}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c"}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c"}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c"}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4"}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4"}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4"}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e"}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e"}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca2f1bbd9530179dfcc5389d9dedd4f5a494c58cbe70cabdbe44aa24ce967d53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca2f1bbd9530179dfcc5389d9dedd4f5a494c58cbe70cabdbe44aa24ce967d53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca2f1bbd9530179dfcc5389d9dedd4f5a494c58cbe70cabdbe44aa24ce967d53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca2f1bbd9530179dfcc5389d9dedd4f5a494c58cbe70cabdbe44aa24ce967d53"}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca2f1bbd9530179dfcc5389d9dedd4f5a494c58cbe70cabdbe44aa24ce967d53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:44:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca2f1bbd9530179dfcc5389d9dedd4f5a494c58cbe70cabdbe44aa24ce967d53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca2f1bbd9530179dfcc5389d9dedd4f5a494c58cbe70cabdbe44aa24ce967d53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca2f1bbd9530179dfcc5389d9dedd4f5a494c58cbe70cabdbe44aa24ce967d53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e"}
{"level":"info","ts":"2026-07-10T14:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca2f1bbd9530179dfcc5389d9dedd4f5a494c58cbe70cabdbe44aa24ce967d53"}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31"}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760"}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31"}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760"}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31"}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760"}
{"level":"error","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760"}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760"}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d"}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d"}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d"}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612"}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5f8670ee2d24ab5818739337728f9c578f1dab3022ae12f04bfbf2f3a675cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5f8670ee2d24ab5818739337728f9c578f1dab3022ae12f04bfbf2f3a675cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5f8670ee2d24ab5818739337728f9c578f1dab3022ae12f04bfbf2f3a675cc"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5f8670ee2d24ab5818739337728f9c578f1dab3022ae12f04bfbf2f3a675cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f5f8670ee2d24ab5818739337728f9c578f1dab3022ae12f04bfbf2f3a675cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5f8670ee2d24ab5818739337728f9c578f1dab3022ae12f04bfbf2f3a675cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5f8670ee2d24ab5818739337728f9c578f1dab3022ae12f04bfbf2f3a675cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5f8670ee2d24ab5818739337728f9c578f1dab3022ae12f04bfbf2f3a675cc"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f"}
{"level":"error","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"}
{"level":"error","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"}
{"level":"debug","ts":"2026-07-10T14:45:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5f8670ee2d24ab5818739337728f9c578f1dab3022ae12f04bfbf2f3a675cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5f8670ee2d24ab5818739337728f9c578f1dab3022ae12f04bfbf2f3a675cc"}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca2f1bbd9530179dfcc5389d9dedd4f5a494c58cbe70cabdbe44aa24ce967d53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca2f1bbd9530179dfcc5389d9dedd4f5a494c58cbe70cabdbe44aa24ce967d53"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecd873626a01cc268abe70bbbe5895c8935ae15eb3a6019751a1fc84dc68e862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecd873626a01cc268abe70bbbe5895c8935ae15eb3a6019751a1fc84dc68e862","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecd873626a01cc268abe70bbbe5895c8935ae15eb3a6019751a1fc84dc68e862","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecd873626a01cc268abe70bbbe5895c8935ae15eb3a6019751a1fc84dc68e862"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecd873626a01cc268abe70bbbe5895c8935ae15eb3a6019751a1fc84dc68e862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecd873626a01cc268abe70bbbe5895c8935ae15eb3a6019751a1fc84dc68e862"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecd873626a01cc268abe70bbbe5895c8935ae15eb3a6019751a1fc84dc68e862","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecd873626a01cc268abe70bbbe5895c8935ae15eb3a6019751a1fc84dc68e862","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e"}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecd873626a01cc268abe70bbbe5895c8935ae15eb3a6019751a1fc84dc68e862"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824"}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760"}
{"level":"error","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"}
{"level":"error","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ed818959e06a785b2b5c6f2426ad16a986f4dcf0af0b32a0641d15ed931eb93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d"}
{"level":"error","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ed818959e06a785b2b5c6f2426ad16a986f4dcf0af0b32a0641d15ed931eb93"}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31"}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"}
{"level":"info","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612"}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31"}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c"}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"}
{"level":"error","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4"}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069"}
{"level":"error","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f"}
{"level":"info","ts":"2026-07-10T14:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"}
{"level":"info","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:50756","PortSpecifier":{"PortValue":50756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:50756","PortSpecifier":{"PortValue":50756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694747,"nanos":513103866},"http":{"id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/sub-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a83f425-5e0a-4260-90de-6cfb55ee7417","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:49762","PortSpecifier":{"PortValue":49762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:49762","PortSpecifier":{"PortValue":49762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694747,"nanos":561144253},"http":{"id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","method":"POST","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/sub-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea1e0fe3-5aad-445e-949f-9b6d2a5746b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:50768","PortSpecifier":{"PortValue":50768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:50768","PortSpecifier":{"PortValue":50768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694747,"nanos":603644123},"http":{"id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","method":"GET","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4hydZSoydBSamcWO_pXkEbGzaYyyOd2ucDwBq3Fg5O7k06Hc9h79Eiv4Q7K7"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4hydZSoydBSamcWO_pXkEbGzaYyyOd2ucDwBq3Fg5O7k06Hc9h79Eiv4Q7K7\"}"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be019217-243d-4e55-8eaf-4188dfaecfa0","keyName":"e2e-sub-iso-283adf","subscription":"e2e-a-only-40e275","tenant":"e2e-shared-a-9e5d79","userId":"be019217-243d-4e55-8eaf-4188dfaecfa0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/sub-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-40e275"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e9ed8c1-3664-4c0b-88fa-95f3196a84cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:49768","PortSpecifier":{"PortValue":49768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ead282c-65dc-4d27-a6ff-17273e80a706","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:49768","PortSpecifier":{"PortValue":49768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694747,"nanos":648531583},"http":{"id":"5ead282c-65dc-4d27-a6ff-17273e80a706","method":"GET","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TaGf3AAA8CQZy2pV_5VRu9sLGhfETbaiY34JDaOhDOij9U3AUqzWV00suWHj"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-feed7a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TaGf3AAA8CQZy2pV_5VRu9sLGhfETbaiY34JDaOhDOij9U3AUqzWV00suWHj\"}"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-feed7a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1930d800-a8ad-4af3-aece-4276ad8cf425","keyName":"e2e-sub-iso-077605","subscription":"e2e-b-only-40e275","tenant":"e2e-shared-b-feed7a","userId":"1930d800-a8ad-4af3-aece-4276ad8cf425","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/sub-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-40e275"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:45:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ead282c-65dc-4d27-a6ff-17273e80a706","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:43380","PortSpecifier":{"PortValue":43380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:43380","PortSpecifier":{"PortValue":43380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694758,"nanos":31422454},"http":{"id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/sub-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae61f86d-2afe-4be5-9b39-980db95b8bf0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:45476","PortSpecifier":{"PortValue":45476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:45476","PortSpecifier":{"PortValue":45476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694758,"nanos":73309751},"http":{"id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","method":"POST","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/sub-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84572c8f-b0fb-4129-a345-ca2c61b0b5a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:43384","PortSpecifier":{"PortValue":43384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b410ee61-80b7-4e79-a03c-72426bb710c3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:43384","PortSpecifier":{"PortValue":43384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694758,"nanos":111742378},"http":{"id":"b410ee61-80b7-4e79-a03c-72426bb710c3","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LQtSpehUysVoVf5W_ggC72M3MTTU0YUOCZY6jGIgLZ9in5JsglVpQiJPxeep"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LQtSpehUysVoVf5W_ggC72M3MTTU0YUOCZY6jGIgLZ9in5JsglVpQiJPxeep\"}"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd98f02d-7ff4-475f-ba7b-62fbbaf4f10a","keyName":"e2e-sub-iso-95e6e6","subscription":"e2e-shared-sub-160ad9","tenant":"e2e-shared-a-9e5d79","userId":"dd98f02d-7ff4-475f-ba7b-62fbbaf4f10a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/sub-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-160ad9"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b410ee61-80b7-4e79-a03c-72426bb710c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:45488","PortSpecifier":{"PortValue":45488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:45488","PortSpecifier":{"PortValue":45488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694758,"nanos":144281158},"http":{"id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","method":"POST","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JGqp6odyb7TuseIQ_Mn8o7SNnbruwCITFshEtwyCM7Mebk0Hw7g6s01jXR2w"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-feed7a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JGqp6odyb7TuseIQ_Mn8o7SNnbruwCITFshEtwyCM7Mebk0Hw7g6s01jXR2w\"}"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-feed7a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"340ebdbf-eef1-437b-97da-b503fbae269b","keyName":"e2e-sub-iso-53fda0","subscription":"e2e-shared-sub-160ad9","tenant":"e2e-shared-b-feed7a","userId":"340ebdbf-eef1-437b-97da-b503fbae269b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/sub-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-160ad9"}
{"level":"info","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:45:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08b084cb-b2bb-4d00-9e1c-e21c96926dff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca2f1bbd9530179dfcc5389d9dedd4f5a494c58cbe70cabdbe44aa24ce967d53"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23b79cdba9e770fbe06b0c8be12382115a999d6ceb478505ab8342a2c5e06760"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb40cf14446a43005e94ae417e49fb41a378ef3b7797397fc7a7329d89d6415d"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f54964f5e7c11e66606698421e860691339e5c81b3aec015cba0a588d68be85f"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f61d98d7448d34e97b3f807884eb5b5e16212b3629a538d673928f983f6fc8e"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/732872efdb281818220aec45206dd62b12ab0e564bacb775226ca96f76becda4"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5361b890e507dc5d809fe9edd41e7f3b6618b83c02de16ea8c9d4c4fdfefb31"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/380e8f95ce2f3cf4adf28381399c5a519db5dc9e9564ecdbf1a6b1d937f6f05d"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f5f8670ee2d24ab5818739337728f9c578f1dab3022ae12f04bfbf2f3a675cc"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30c481e81dbe15bad19aa9d77159a7430ddbb42e389e9d57f8a0442ffe6a8612"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2345c79e80e43123a4b681c8ba304aaa06dc2e07c7e5a213e97c292f726871e7"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cb3593aee721ea4ed46c14d8aec99adc6872ed452cf6e9bcf9719f98fa07846"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4848ef5a9697a3e189287b38449965ae8a851d452d29292fc23029366e1ed1c"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff5ea7c42a941be175e36c499c066ab5f91e5ede883694c8108060e014230824"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e162a26c673c0c504a3401d3a621bbe01861cc212a79a39f396d79fadf53d636"}
{"level":"info","ts":"2026-07-10T14:46:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4409789d13fd3325e1da6ac1b805ebf557c8814cba4c646df97b24f400cb2e7"}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8"}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8"}
{"level":"error","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8"}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8"}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37"}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8"}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37"}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8"}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37"}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b"}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37"}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b"}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37"}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f"}
{"level":"info","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f"}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f"}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09"}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09"}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec"}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8538704418b3ea0d0a52fff00babe3770ecec898ec7ee37d93d262e8d8228a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8538704418b3ea0d0a52fff00babe3770ecec898ec7ee37d93d262e8d8228a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8538704418b3ea0d0a52fff00babe3770ecec898ec7ee37d93d262e8d8228a2"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8538704418b3ea0d0a52fff00babe3770ecec898ec7ee37d93d262e8d8228a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8538704418b3ea0d0a52fff00babe3770ecec898ec7ee37d93d262e8d8228a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8538704418b3ea0d0a52fff00babe3770ecec898ec7ee37d93d262e8d8228a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8538704418b3ea0d0a52fff00babe3770ecec898ec7ee37d93d262e8d8228a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8538704418b3ea0d0a52fff00babe3770ecec898ec7ee37d93d262e8d8228a2"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec"}
{"level":"info","ts":"2026-07-10T14:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e"}
{"level":"debug","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa"}
{"level":"debug","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa"}
{"level":"debug","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa"}
{"level":"debug","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"info","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"debug","ts":"2026-07-10T14:46:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac"}
{"level":"error","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0935ebefa0ffb110bdc29df0a8d427201ae0d19cd1aab6c6d3ae639bba3e0501","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0935ebefa0ffb110bdc29df0a8d427201ae0d19cd1aab6c6d3ae639bba3e0501","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0935ebefa0ffb110bdc29df0a8d427201ae0d19cd1aab6c6d3ae639bba3e0501","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0935ebefa0ffb110bdc29df0a8d427201ae0d19cd1aab6c6d3ae639bba3e0501"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0935ebefa0ffb110bdc29df0a8d427201ae0d19cd1aab6c6d3ae639bba3e0501","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73"}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0935ebefa0ffb110bdc29df0a8d427201ae0d19cd1aab6c6d3ae639bba3e0501","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0935ebefa0ffb110bdc29df0a8d427201ae0d19cd1aab6c6d3ae639bba3e0501"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0935ebefa0ffb110bdc29df0a8d427201ae0d19cd1aab6c6d3ae639bba3e0501","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0935ebefa0ffb110bdc29df0a8d427201ae0d19cd1aab6c6d3ae639bba3e0501"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0935ebefa0ffb110bdc29df0a8d427201ae0d19cd1aab6c6d3ae639bba3e0501","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"}
{"level":"debug","ts":"2026-07-10T14:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"debug","ts":"2026-07-10T14:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8538704418b3ea0d0a52fff00babe3770ecec898ec7ee37d93d262e8d8228a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8538704418b3ea0d0a52fff00babe3770ecec898ec7ee37d93d262e8d8228a2"}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b"}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f"}
{"level":"error","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069"}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37"}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069"}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e"}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T14:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T14:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069"}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T14:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T14:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecd873626a01cc268abe70bbbe5895c8935ae15eb3a6019751a1fc84dc68e862","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0935ebefa0ffb110bdc29df0a8d427201ae0d19cd1aab6c6d3ae639bba3e0501","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73"}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069"}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecd873626a01cc268abe70bbbe5895c8935ae15eb3a6019751a1fc84dc68e862"}
{"level":"debug","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0935ebefa0ffb110bdc29df0a8d427201ae0d19cd1aab6c6d3ae639bba3e0501"}
{"level":"debug","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ed818959e06a785b2b5c6f2426ad16a986f4dcf0af0b32a0641d15ed931eb93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac"}
{"level":"debug","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ed818959e06a785b2b5c6f2426ad16a986f4dcf0af0b32a0641d15ed931eb93"}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09"}
{"level":"info","ts":"2026-07-10T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"}
{"level":"info","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44918","PortSpecifier":{"PortValue":44918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44918","PortSpecifier":{"PortValue":44918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694816,"nanos":807259171},"http":{"id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f685689-40b7-46a0-be89-d5de3ebb7d39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09c6a5de-de54-444d-ba4c-595bc3194294","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:43736","PortSpecifier":{"PortValue":43736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09c6a5de-de54-444d-ba4c-595bc3194294","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09c6a5de-de54-444d-ba4c-595bc3194294","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:43736","PortSpecifier":{"PortValue":43736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694816,"nanos":858143416},"http":{"id":"09c6a5de-de54-444d-ba4c-595bc3194294","method":"POST","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09c6a5de-de54-444d-ba4c-595bc3194294","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09c6a5de-de54-444d-ba4c-595bc3194294","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09c6a5de-de54-444d-ba4c-595bc3194294","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09c6a5de-de54-444d-ba4c-595bc3194294","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09c6a5de-de54-444d-ba4c-595bc3194294","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09c6a5de-de54-444d-ba4c-595bc3194294","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/rate-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09c6a5de-de54-444d-ba4c-595bc3194294","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09c6a5de-de54-444d-ba4c-595bc3194294","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09c6a5de-de54-444d-ba4c-595bc3194294","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09c6a5de-de54-444d-ba4c-595bc3194294","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09c6a5de-de54-444d-ba4c-595bc3194294","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44928","PortSpecifier":{"PortValue":44928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce7d387d-fabe-48ac-a123-423eef6e1178","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44928","PortSpecifier":{"PortValue":44928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694816,"nanos":900987193},"http":{"id":"ce7d387d-fabe-48ac-a123-423eef6e1178","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v"}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v\"}"}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","subscription":"e2e-rate-iso-a-e2861a","tenant":"e2e-shared-a-9e5d79","userId":"8f7f1087-832e-45e9-b482-2409200f8a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-e2861a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e2861a"}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","selected_subscription":"e2e-rate-iso-a-e2861a","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-e2861a@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:46:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce7d387d-fabe-48ac-a123-423eef6e1178","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44936","PortSpecifier":{"PortValue":44936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44936","PortSpecifier":{"PortValue":44936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694817,"nanos":956932525},"http":{"id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v"}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v\"}"}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","subscription":"e2e-rate-iso-a-e2861a","tenant":"e2e-shared-a-9e5d79","userId":"8f7f1087-832e-45e9-b482-2409200f8a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-e2861a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e2861a"}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","selected_subscription":"e2e-rate-iso-a-e2861a","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-e2861a@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:46:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61fdba2a-7ace-4234-b99b-65e2d5cc67fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:46:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44952","PortSpecifier":{"PortValue":44952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:46:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44952","PortSpecifier":{"PortValue":44952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694818,"nanos":994071264},"http":{"id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:46:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v"}
{"level":"debug","ts":"2026-07-10T14:46:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v\"}"}
{"level":"debug","ts":"2026-07-10T14:46:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","subscription":"e2e-rate-iso-a-e2861a","tenant":"e2e-shared-a-9e5d79","userId":"8f7f1087-832e-45e9-b482-2409200f8a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:46:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-e2861a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:46:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:46:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:46:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e2861a"}
{"level":"debug","ts":"2026-07-10T14:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:46:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","selected_subscription":"e2e-rate-iso-a-e2861a","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-e2861a@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:46:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88b2503e-64b0-4530-8bfd-e588882e4d5c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44968","PortSpecifier":{"PortValue":44968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44968","PortSpecifier":{"PortValue":44968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694820,"nanos":30844137},"http":{"id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v"}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v\"}"}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","subscription":"e2e-rate-iso-a-e2861a","tenant":"e2e-shared-a-9e5d79","userId":"8f7f1087-832e-45e9-b482-2409200f8a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-e2861a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e2861a"}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","selected_subscription":"e2e-rate-iso-a-e2861a","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-e2861a@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f6d4b41-d732-4cc8-a2dd-db83dc9eb98e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44980","PortSpecifier":{"PortValue":44980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44980","PortSpecifier":{"PortValue":44980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694821,"nanos":67459508},"http":{"id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v"}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v\"}"}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","subscription":"e2e-rate-iso-a-e2861a","tenant":"e2e-shared-a-9e5d79","userId":"8f7f1087-832e-45e9-b482-2409200f8a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-e2861a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e2861a"}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","selected_subscription":"e2e-rate-iso-a-e2861a","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-e2861a@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93067327-93a8-4268-8f0e-9c2cbe7f9c84","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44990","PortSpecifier":{"PortValue":44990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44990","PortSpecifier":{"PortValue":44990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694822,"nanos":114285761},"http":{"id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v"}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v\"}"}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","subscription":"e2e-rate-iso-a-e2861a","tenant":"e2e-shared-a-9e5d79","userId":"8f7f1087-832e-45e9-b482-2409200f8a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-e2861a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e2861a"}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","selected_subscription":"e2e-rate-iso-a-e2861a","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-e2861a@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b420a0d6-88b2-4cea-9985-8b1a55a1fa42","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44998","PortSpecifier":{"PortValue":44998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44998","PortSpecifier":{"PortValue":44998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694823,"nanos":165321398},"http":{"id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v"}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v\"}"}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","subscription":"e2e-rate-iso-a-e2861a","tenant":"e2e-shared-a-9e5d79","userId":"8f7f1087-832e-45e9-b482-2409200f8a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-e2861a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e2861a"}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","selected_subscription":"e2e-rate-iso-a-e2861a","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-e2861a@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4cb58a6-1dca-46c2-b631-2a08bde79aeb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:45000","PortSpecifier":{"PortValue":45000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:45000","PortSpecifier":{"PortValue":45000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694824,"nanos":202740635},"http":{"id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v"}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v\"}"}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","subscription":"e2e-rate-iso-a-e2861a","tenant":"e2e-shared-a-9e5d79","userId":"8f7f1087-832e-45e9-b482-2409200f8a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-e2861a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e2861a"}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","selected_subscription":"e2e-rate-iso-a-e2861a","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-e2861a@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f38604ab-ad82-43c7-b230-bae7f6bcb6f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:45004","PortSpecifier":{"PortValue":45004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:45004","PortSpecifier":{"PortValue":45004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694825,"nanos":241133249},"http":{"id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v"}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v\"}"}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","subscription":"e2e-rate-iso-a-e2861a","tenant":"e2e-shared-a-9e5d79","userId":"8f7f1087-832e-45e9-b482-2409200f8a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-e2861a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e2861a"}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","selected_subscription":"e2e-rate-iso-a-e2861a","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-e2861a@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcf1db12-1b83-4d4d-b432-5bb1bd5b8dde","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b08986c-255f-473a-9770-344c697c0f81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:42974","PortSpecifier":{"PortValue":42974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b08986c-255f-473a-9770-344c697c0f81","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b08986c-255f-473a-9770-344c697c0f81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:42974","PortSpecifier":{"PortValue":42974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694826,"nanos":278108712},"http":{"id":"0b08986c-255f-473a-9770-344c697c0f81","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b08986c-255f-473a-9770-344c697c0f81","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v"}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0b08986c-255f-473a-9770-344c697c0f81","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v\"}"}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0b08986c-255f-473a-9770-344c697c0f81","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","subscription":"e2e-rate-iso-a-e2861a","tenant":"e2e-shared-a-9e5d79","userId":"8f7f1087-832e-45e9-b482-2409200f8a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0b08986c-255f-473a-9770-344c697c0f81","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-e2861a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0b08986c-255f-473a-9770-344c697c0f81","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b08986c-255f-473a-9770-344c697c0f81","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b08986c-255f-473a-9770-344c697c0f81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b08986c-255f-473a-9770-344c697c0f81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b08986c-255f-473a-9770-344c697c0f81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b08986c-255f-473a-9770-344c697c0f81","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b08986c-255f-473a-9770-344c697c0f81","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b08986c-255f-473a-9770-344c697c0f81","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e2861a"}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b08986c-255f-473a-9770-344c697c0f81","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b08986c-255f-473a-9770-344c697c0f81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","selected_subscription":"e2e-rate-iso-a-e2861a","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-e2861a@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b08986c-255f-473a-9770-344c697c0f81","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b08986c-255f-473a-9770-344c697c0f81","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:42976","PortSpecifier":{"PortValue":42976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:42976","PortSpecifier":{"PortValue":42976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694827,"nanos":315520939},"http":{"id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v"}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AO0gSbbNBCaAZlne_9Fy10duz6dmavl6kb1tdr8CwbmwsTCljXsNtPL0ui1v\"}"}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","subscription":"e2e-rate-iso-a-e2861a","tenant":"e2e-shared-a-9e5d79","userId":"8f7f1087-832e-45e9-b482-2409200f8a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-e2861a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e2861a"}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8f7f1087-832e-45e9-b482-2409200f8a88","keyName":"e2e-rate-a-e2861a","selected_subscription":"e2e-rate-iso-a-e2861a","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-e2861a@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e2861a","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f93bb08b-f2ba-48e7-b73e-b2fd23dd3605","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52886","PortSpecifier":{"PortValue":52886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52886","PortSpecifier":{"PortValue":52886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694836,"nanos":192365699},"http":{"id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa9e3faa-ae0b-4bbb-b4d2-e09bff648549","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44580","PortSpecifier":{"PortValue":44580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44580","PortSpecifier":{"PortValue":44580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694836,"nanos":228711857},"http":{"id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","method":"POST","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"]}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cdae14feda74"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=432a1282-c337-4285-a596-aac994571fc6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d7a26428-7c84-43af-ad27-35f5ce9e568f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/rate-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a98ae75-5ceb-449d-8eb9-b57ec630bb7d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52896","PortSpecifier":{"PortValue":52896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99cac686-6f77-4318-96ac-ade6022e6ce6","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52896","PortSpecifier":{"PortValue":52896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694836,"nanos":263099493},"http":{"id":"99cac686-6f77-4318-96ac-ade6022e6ce6","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl"}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl\"}"}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","subscription":"e2e-rate-iso-a-46eca9","tenant":"e2e-shared-a-9e5d79","userId":"418a8904-0bcc-4d39-8768-a52602f188b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-46eca9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-46eca9"}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","selected_subscription":"e2e-rate-iso-a-46eca9","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-46eca9@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99cac686-6f77-4318-96ac-ade6022e6ce6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52910","PortSpecifier":{"PortValue":52910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52910","PortSpecifier":{"PortValue":52910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694837,"nanos":297483913},"http":{"id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl"}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl\"}"}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","subscription":"e2e-rate-iso-a-46eca9","tenant":"e2e-shared-a-9e5d79","userId":"418a8904-0bcc-4d39-8768-a52602f188b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-46eca9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-46eca9"}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","selected_subscription":"e2e-rate-iso-a-46eca9","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-46eca9@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a2a681e-858d-4fc8-9947-b648e0f5a71d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52914","PortSpecifier":{"PortValue":52914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52914","PortSpecifier":{"PortValue":52914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694838,"nanos":334455833},"http":{"id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl"}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl\"}"}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","subscription":"e2e-rate-iso-a-46eca9","tenant":"e2e-shared-a-9e5d79","userId":"418a8904-0bcc-4d39-8768-a52602f188b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-46eca9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-46eca9"}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","selected_subscription":"e2e-rate-iso-a-46eca9","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-46eca9@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"def62ad9-e518-4e86-a71c-fb08d33c1c2f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52916","PortSpecifier":{"PortValue":52916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52916","PortSpecifier":{"PortValue":52916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694839,"nanos":370246550},"http":{"id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl"}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl\"}"}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","subscription":"e2e-rate-iso-a-46eca9","tenant":"e2e-shared-a-9e5d79","userId":"418a8904-0bcc-4d39-8768-a52602f188b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-46eca9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-46eca9"}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","selected_subscription":"e2e-rate-iso-a-46eca9","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-46eca9@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80449c22-29f8-9ef6-82c9-a72fa77e9621","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14870a72-1958-4173-af9c-fdb15db514cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52926","PortSpecifier":{"PortValue":52926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14870a72-1958-4173-af9c-fdb15db514cd","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14870a72-1958-4173-af9c-fdb15db514cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52926","PortSpecifier":{"PortValue":52926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694840,"nanos":406161098},"http":{"id":"14870a72-1958-4173-af9c-fdb15db514cd","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14870a72-1958-4173-af9c-fdb15db514cd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl"}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14870a72-1958-4173-af9c-fdb15db514cd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl\"}"}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14870a72-1958-4173-af9c-fdb15db514cd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","subscription":"e2e-rate-iso-a-46eca9","tenant":"e2e-shared-a-9e5d79","userId":"418a8904-0bcc-4d39-8768-a52602f188b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14870a72-1958-4173-af9c-fdb15db514cd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-46eca9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14870a72-1958-4173-af9c-fdb15db514cd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14870a72-1958-4173-af9c-fdb15db514cd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14870a72-1958-4173-af9c-fdb15db514cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14870a72-1958-4173-af9c-fdb15db514cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14870a72-1958-4173-af9c-fdb15db514cd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14870a72-1958-4173-af9c-fdb15db514cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14870a72-1958-4173-af9c-fdb15db514cd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-46eca9"}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14870a72-1958-4173-af9c-fdb15db514cd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14870a72-1958-4173-af9c-fdb15db514cd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14870a72-1958-4173-af9c-fdb15db514cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","selected_subscription":"e2e-rate-iso-a-46eca9","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-46eca9@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14870a72-1958-4173-af9c-fdb15db514cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14870a72-1958-4173-af9c-fdb15db514cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52932","PortSpecifier":{"PortValue":52932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52932","PortSpecifier":{"PortValue":52932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694841,"nanos":444265630},"http":{"id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl"}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl\"}"}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","subscription":"e2e-rate-iso-a-46eca9","tenant":"e2e-shared-a-9e5d79","userId":"418a8904-0bcc-4d39-8768-a52602f188b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-46eca9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-46eca9"}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","selected_subscription":"e2e-rate-iso-a-46eca9","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-46eca9@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0be1ef01-774e-4c21-9f18-05141b9f60a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52940","PortSpecifier":{"PortValue":52940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52940","PortSpecifier":{"PortValue":52940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694842,"nanos":477678952},"http":{"id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl"}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl\"}"}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","subscription":"e2e-rate-iso-a-46eca9","tenant":"e2e-shared-a-9e5d79","userId":"418a8904-0bcc-4d39-8768-a52602f188b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-46eca9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-46eca9"}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","selected_subscription":"e2e-rate-iso-a-46eca9","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-46eca9@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac5e3985-0e51-4219-9fa6-2d80abf4ad25","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52956","PortSpecifier":{"PortValue":52956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eafecacb-23dc-41e1-bf0c-11301d30c634","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52956","PortSpecifier":{"PortValue":52956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694843,"nanos":514525513},"http":{"id":"eafecacb-23dc-41e1-bf0c-11301d30c634","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl"}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl\"}"}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","subscription":"e2e-rate-iso-a-46eca9","tenant":"e2e-shared-a-9e5d79","userId":"418a8904-0bcc-4d39-8768-a52602f188b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-46eca9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-46eca9"}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","selected_subscription":"e2e-rate-iso-a-46eca9","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-46eca9@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eafecacb-23dc-41e1-bf0c-11301d30c634","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52964","PortSpecifier":{"PortValue":52964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2485ea9-7c08-47a1-add2-c500753203dc","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52964","PortSpecifier":{"PortValue":52964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694844,"nanos":550488404},"http":{"id":"d2485ea9-7c08-47a1-add2-c500753203dc","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl"}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl\"}"}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","subscription":"e2e-rate-iso-a-46eca9","tenant":"e2e-shared-a-9e5d79","userId":"418a8904-0bcc-4d39-8768-a52602f188b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-46eca9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-46eca9"}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","selected_subscription":"e2e-rate-iso-a-46eca9","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-46eca9@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2485ea9-7c08-47a1-add2-c500753203dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52972","PortSpecifier":{"PortValue":52972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","method":"POST","path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions","host":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:52972","PortSpecifier":{"PortValue":52972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694845,"nanos":585005785},"http":{"id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","method":"POST","headers":{":authority":"e2e-shared-a-9e5d79.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jQ1KHEJ291L0N45w_FDkI7Ywtgd4uYdB6RNWMT5o7PHPHxTfSD2ttgGZrDWl\"}"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","subscription":"e2e-rate-iso-a-46eca9","tenant":"e2e-shared-a-9e5d79","userId":"418a8904-0bcc-4d39-8768-a52602f188b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\",\"requestedSubscription\":\"e2e-rate-iso-a-46eca9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9e5d79.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-46eca9"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"418a8904-0bcc-4d39-8768-a52602f188b8","keyName":"e2e-rate-a-46eca9","selected_subscription":"e2e-rate-iso-a-46eca9","selected_subscription_key":"ai-tenant-e2e-shared-a-9e5d79/e2e-rate-iso-a-46eca9@ai-tenant-e2e-shared-a-9e5d79/rate-test-model-9e5d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9e5d79","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-46eca9","namespace":"ai-tenant-e2e-shared-a-9e5d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be9c52d9-84b9-4147-837d-f1ab6e41d8e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44590","PortSpecifier":{"PortValue":44590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b155fba-240c-4f9b-90bd-950e76d73340","method":"POST","path":"/ai-tenant-e2e-shared-b-feed7a/rate-test-model-feed7a/v1/completions","host":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.22:44590","PortSpecifier":{"PortValue":44590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783694845,"nanos":620388585},"http":{"id":"7b155fba-240c-4f9b-90bd-950e76d73340","method":"POST","headers":{":authority":"e2e-shared-b-feed7a.apps.ecf43ff9-f838-4a6b-abe6-cdae14feda74.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-feed7a/rate-test-model-feed7a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EkUCHwEp6gkb2Jd1_uyk547biavippm3DI4rBNmYwyJM7zytLhDvSN1pH884"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-feed7a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EkUCHwEp6gkb2Jd1_uyk547biavippm3DI4rBNmYwyJM7zytLhDvSN1pH884\"}"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-feed7a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c17b0a99-fdc0-4cb8-9941-cd2673749978","keyName":"e2e-rate-b-46eca9","subscription":"e2e-rate-iso-b-46eca9","tenant":"e2e-shared-b-feed7a","userId":"c17b0a99-fdc0-4cb8-9941-cd2673749978","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-feed7a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-feed7a/rate-test-model-feed7a\",\"requestedSubscription\":\"e2e-rate-iso-b-46eca9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-feed7a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-feed7a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-46eca9","namespace":"ai-tenant-e2e-shared-b-feed7a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-feed7a/rate-test-model-feed7a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-46eca9"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c17b0a99-fdc0-4cb8-9941-cd2673749978","keyName":"e2e-rate-b-46eca9","selected_subscription":"e2e-rate-iso-b-46eca9","selected_subscription_key":"ai-tenant-e2e-shared-b-feed7a/e2e-rate-iso-b-46eca9@ai-tenant-e2e-shared-b-feed7a/rate-test-model-feed7a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-feed7a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-46eca9","namespace":"ai-tenant-e2e-shared-b-feed7a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T14:47:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b155fba-240c-4f9b-90bd-950e76d73340","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T14:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/170620906129119a4f6a1a4efc48bbeaa6ed422ea635c2bdfb9faf9a5b4d106e"}
{"level":"info","ts":"2026-07-10T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c08b3c8c999074b93460d6977a1635b02c8964aafc0811790da22c7da4ff0b1f"}
{"level":"info","ts":"2026-07-10T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8538704418b3ea0d0a52fff00babe3770ecec898ec7ee37d93d262e8d8228a2"}
{"level":"info","ts":"2026-07-10T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3a96a5a69bda990c1cd8ee915ac4d03a8c58188105f5ab92f753feffed63d37"}
{"level":"info","ts":"2026-07-10T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f363a81e4b828907dd0d89e3ab485331f757ed4ae51b66297ef95111c82763b"}
{"level":"info","ts":"2026-07-10T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e0eb1e69edeac2b59c819a4e7ba0a5b0a8d05cdadce0e28aa8e4a0d40636c09"}
{"level":"info","ts":"2026-07-10T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93f2eb488d351a19ea3c9cd7ced5a8278acff3fecea9de9e841b1171ab2bcfb8"}
{"level":"info","ts":"2026-07-10T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/442943051a28b28e90d12d6cdccb43d5e36d43ebcf7689324fb796cc868aaaec"}
{"level":"info","ts":"2026-07-10T14:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33bdbb2e47a2e9a3dfa6c1f6d29da5c0e774be937d12f25338ec04fa46f8ad73"}
{"level":"info","ts":"2026-07-10T14:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0935ebefa0ffb110bdc29df0a8d427201ae0d19cd1aab6c6d3ae639bba3e0501"}
{"level":"info","ts":"2026-07-10T14:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/897fa468e90e014b1f171aefcc5e25acd262fbb537117d0012b68edc5618c0aa"}
{"level":"info","ts":"2026-07-10T14:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/207ed46d822749d86938e24130e6c9cbe4fa331b106f5cded43657cfa4ee3ca9"}
{"level":"info","ts":"2026-07-10T14:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70054b29c515cac01facc16a6e4f6fc7055214e53fb7dc3adea4b3614494152e"}
{"level":"info","ts":"2026-07-10T14:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cefec31ab7c35f65c41d15438853fda8c38cab0f4a41b1683ed201cf42ee4ab"}
{"level":"info","ts":"2026-07-10T14:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7921e34a6c2f6c0ef0554e2257b43bfe6dbb455695401aca9141f753ef8c8fac"}
{"level":"info","ts":"2026-07-10T14:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da0839e89a2bb83ed1a1ac2f6be6acc1d741842770d6e981ea338d6b094341cb"}
{"level":"info","ts":"2026-07-10T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecd873626a01cc268abe70bbbe5895c8935ae15eb3a6019751a1fc84dc68e862"}
{"level":"info","ts":"2026-07-10T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70d9321a0fe3220a37067415d9bd29572e139b983e96505a2ab83d35cce9f6c7"}
{"level":"info","ts":"2026-07-10T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8617fd994eaea27d6be4e530cadb402aa1ea54a950d814b98b4c5a4c5ec55069"}
{"level":"info","ts":"2026-07-10T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ed818959e06a785b2b5c6f2426ad16a986f4dcf0af0b32a0641d15ed931eb93"}
{"level":"info","ts":"2026-07-10T14:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19d4a6d23158b6df424af025bf650ca82315b04ccd126db09fd5248afe92b5af"}
{"level":"info","ts":"2026-07-10T14:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7438e7273bbd86e32755805d06ac398f3719b17c401803fceffe3e117bc45887"}
{"level":"info","ts":"2026-07-10T14:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f24aca22a9bf47720971e6dc80fb38b7f2bcc51f6cddb9465eac1571b233a186"}
{"level":"info","ts":"2026-07-10T14:47:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/965686842c3fd2c48773ba6868aa94e3ba7f6e3f97faf193f2c86884da7b28fd"}